����t3X�ݢL�L����4!#4쮂�Ig�����C���⠏j��m�0y+ ,���ZjƢ�Q�C`��N�>�Ʌ� K��>ؖa�}�=p���|����ݻ��t!�Ԡ�0T� DD�� ����k���U��I�t�0Op ����p��P�w蔙������JF�Ys�"@���g�q�"�f��PØ���1B��C�O^��9�� E>\ �!{��ٕjsW$F��O�K?`X0T[N&���Y�B�d_��`�2���=^�Fsi�.]�}Mxq�! �3i�ŗ�u���#73�D�t����EW{���kc�le��f�l||�c��>۞����v�n���c 6��`�dO� 0�Et�ݔ�Հm�φ�D$�d�=Iؖ$&��ݳ���]������[����`�ԫ��D�Z�jH���R��q�VsB?7b��3ϭ(�R��{D �'�`�*����J���ኂz�:0�d�1{�`��[ ���>{0w6�����P�/ĺ����P��#OA�o*�� "���N2�S���C��?�S�{ܰ�,m�Uü������hAT�:�VP%�33c)���2�4#ݦ�ÁY�G����u�h���/�FPÀk�f~�t���67MJWᇖ�Z ��~��l�>����s��#F��A�f8����I���8&U��]���X�� �R�;ħ�1�5���̅oF(:q�'��g�0O�A���5�kq,je� X�5�&�tG��:� ���є����s>��Fx��&W|m3�9�V�F=��̟�f���&¾�u:#�8�9^l��ݲ�2f�4w �Tó���'ڛR�j vm8e����Ir���!�`�9�"�Z���1a�!���%��1{h)�^c��%���k4�X���Aڿ���� F^Ώl����������j;��g��+p�u���iY��6���Z;���!?�]�¥%�iZ���5���|��E��'�D R�.qb��|�}i��K���\���vTژ[��p���!~y{3���Ng��V�~�<9o��e_o��?�u�f%����R��p�����WL�ey�+/`�(�r���gS�F� ~����/Lv1�b2I[8��^ IT����}%�g��-b:��*��o�om-��i�npSf���W����~�B;Pv���M"��l-}����:/�O�vi=�W��jȝ�$�i��)���a6@���7��ȩ�����k�8�9B3�t��k��mTq(F ��9t�l:7,�d��>�BJ'#.Z���l��M�x�ut���.�6�T-H}���,�˓����g���M�3[�K��d;*�GP+y�7\���^�۱$��`O�v��C�RXl��:F�3���ep��a[ �����*\��P��K̒��E�?�%��l��F��Ec�����F-�.X�Hk8G��+�pݯeC�CF5��r>[d�_%|�Wއ�h�D��,LR�o���Y^���E w�h��J��,\�N(4>P�`�f+���ݭƌ�h��7�D[�ql���� ������fEĪ�\}W}/�iq�B4����W?���/�� v�Ar+��i�T*P��zx�Ry��� ����i��@A��/��o:n۬g�@*��hg&�����^����a��a^��7a@��x+n��(M�'5W�G� 9��OP�٤�U'����Tc� � ��#�@cLb����KRп�v��� �Be�����'��ĵ�������n�D�+A��",V>��c9��^�aE"ƣq���K����&���u���h���8`�c�����53CU �H����N�̪?w��7e~M��o����tr�$c��HT��^v)�����Ҭ�u��e�����E֎�2�>����C�u��M��=6�C�\Lt\+|��>����I�zF���p�I_)N�{w��1^���e���p�T��W�S +�!������yH2�#.�c�������:�>��{��j�i���]2S����x��ؘ��S9�������K�2}39ֵf?x���l��W�{�nHV����qG�0�����B��ѧ ,���V>�4�E;���E�p�wE�T|m���hEJZ����'���Yap��apz���U��j��v"\���j�����IYm#�n��������P��3Ğ�5�Qp����&[~hcx�o�毐.2�>��@ڻ�γ��YSσ��E�(�<n���O ��� �r�Q�x3�g`�%�J�6�vv�Ko ��/Z����]l�#6a�H�I�euhD!Cd@zت]�@C�l��7<��z���b��dL�/����8�s�o�ڭ+]'M�"#���m��/���w'�/$jW"i+�X��$�s�!g�1������w������;TC��e*rΏxq� ��������g����Ҕ�-2�r��ߟ}Ӫ���"��0F��R�<��u���p1���㞑<��*����_����<�!?�����Xy �W(Y<}MvU�/^���B9t���TH���&��O�9�#d����O���߱��;��� K�D*����v+<����¥Fn6>,GG����ADh�3�iG���Fd;��T��"��C�٧��.�6Ӓ�LQ�smA�F�6,)��6ta��ᅥ)����{���ٓ��ث�Fߐ*QO��m�'Js�')�B�������le��Cb��4���4��E��(���,�����4yf���[ʱ�3�+� `����5H�ʮL�R"���}Ma5:���oj��u��?����/��ϭ~� ^HnK:�-�j�� �[�@��\��:���V湩�1{�ÛѫF��o�n��\�Jե����}}�r�/#C����f��L���Cf��V�A0#g�&�>���Kk�v�̍$'�f� �to���5�,-�0���?E������ˡ�H-i��Ӻj� �/B ٛ�x�|���b�!��ؿ����=ih�R�Z���;4-�0�ʴ�`E�3 ��9�㝬�o^J��aAc�M�[D�Ԩ������� 6�{Q��FYW�*��~�]� ���?�M}�n@i�;J--�d�F�`��3}d]Ro�*���8�0����la�L*z�d��?ZУ�쐹QeL��FOccp��h�2I�h�w �d��BLa§� f�n�����I��0l���~�˼�W�c��$S�:B(Ҍ��q_ .���:�I�a�fF��k��Dm�`�����X�Ŭ��l��h�a/.1���l��H��?y��4P�%6�K�gHsX�� �%��C#R�{��D��9CA�Õ������c~��.��>���lƺD��-5X~�R`D�����}xm��FT�'�B؆���)8@��Ia8?���f�����8+a����NF�7Һ�UU�{s(�O����}���4on�)S�W��n�H5w�-��/:�:�m9�$̻�`����b�~��m ��/S3�^�ة�1(c�d�X'���g��b�j���v�C��{�SO#h�CB: ���rUvc(�c��#�Θ�J��z�/�EI�G���I�'B&� 5��B���`�]�6n�Z�S��d���1# ��)x�\1�y)՚�{&"��e,+�݅H�C<�B�v��J`rL���8��]�?b̖���Ө:��H.CW�e�?u�-o���a>�'jm��W�"uQվ��1�z+n��B?��X�ʓ-
Static task
static1
Behavioral task
behavioral1
Sample
3138d93103beb32fc3bb2af19bfe5833d759a59a4514ec7215cec31fd9d23753.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
3138d93103beb32fc3bb2af19bfe5833d759a59a4514ec7215cec31fd9d23753.exe
Resource
win11-20240802-en
General
-
Target
3138d93103beb32fc3bb2af19bfe5833d759a59a4514ec7215cec31fd9d23753
-
Size
3.0MB
-
MD5
6b7f2348c033d04b0c140bf0b2df9eff
-
SHA1
1087ddf2511d8da61696f8ec1a81c26399e895a0
-
SHA256
3138d93103beb32fc3bb2af19bfe5833d759a59a4514ec7215cec31fd9d23753
-
SHA512
219f7edc7a564a1a83e0face13d78d32694178081d4862e8846a6d86beb006e172d3146d8bbbcf0d85d2b1cf99fe5b2e946bb1a103d3c5283fa7e0f765eb12f2
-
SSDEEP
49152:ojAM4XzA68hO000mwKsAYZWcl7Mv/xkhuRQNLxlIib6sG2HNFhB7uc1j2x:osxA68hO/4jZhuiNE265GJy4j6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3138d93103beb32fc3bb2af19bfe5833d759a59a4514ec7215cec31fd9d23753
Files
-
3138d93103beb32fc3bb2af19bfe5833d759a59a4514ec7215cec31fd9d23753.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE