�2z��d�Dcy*ջ'�۠6�!F�,B��A�Bg�5����N�l6A�����`���s����S�ԠO��dR�e�6��7�hk$��4��~&��Qo\I5*'�n� 13��rg�E�PM���Q��s���S%��0�]u2��K=�W��_��_/�JU5��"Y"p/ � ��t��Egy��TO���<�ګ�)�i�P%�k��p\��@XOy�dmm��Y�s6F�b#�������6���k����y���;��0P�%������L��s��3vF�(R9�P�(�������D��4��Fּ���9��hQM0����5���F{%��:��:+�V��b���p�}(�t���<Rgk�_ ���H+�Q&i[:�#:_&�W#��ec�l���<k�lbI$s]_!��vN%X��<�9&�0C���5�$�U�+0L����!���6���+��|�#-N8���2���c��b��1�њD��݅�:²]�m* �ӵnУ��'���3 7�;������Be7�۾�Dak�ܴQy��0 ;אÈ��ʨ��=�E�[�7Napo���>_�� �UV����$<���,`_�;$�E��p7��a�H(���X��±���&H����z2�wa�L���2���[X�.`�l��'Y�n�(쩋�-���ݜ�Tx&A�"���a�`��X/(z�1]���ߺ^��w ;ے��!�[��9K�v��0|O��[%3%�ܖ�i��^���^8`ʹ�j��U�� 9�\gr��z%R� +(��|�V+��Κ&��2<en�0��|Ot���C)�D(���ҍz݂]�i�2�'��VP�t�$1/��I{���|��Oa��ڨ��̓�:�`^��2�o����1���/��uA��շ�8���+��^���^?����~&g��Xޕ����DP Om��SF辈�}� ��l��UM+��5�diX�M%��R����m7J} ��;�yuRDu&���i���,��~O��M(5���3�7M+�'���GR��E�M,b{�Oc>����f$��ᙛ���G����x�����g�6�#j��eː^�����.�]��D𡥤-�DS�=�N�t3�n����Ι�z��1J���K�1�l���|1m��1�k����\<��g1;i/YJ����,?��2.+w~��@���@����<%�Ų.�������n�/��P���rGx������#��T�K���[ˋ�b@�u��wXd�Q#�`�X�2���w��mY�Q`�������� �u�џ����:l�U��[1��3$���&'��1�Ċ��4��b#�G-1��A�ϵ����Р�������7���W����2���\��H;���S�J'���t��� 57���li)rB�__��y�Y�h�����Χ�� =�h��X,�;���t;�O�� ������������r����lq�4c/Y?��=����#��S�G��de���e�T��X�n�,1r*�RH��I��M���L��,��JSԵf��a�Y;3�\�(_�(����y��H����xKS<���y�W�s����ى�� o��:��M=,�S�+��$�n��u� ��9600c��?�?��e���NX��Jә�F<�"���w� �6}���?��~f|�@�¶t~e�)?����<����"��;f���D�B����я�P5Ϊ�Ă��_���#ݤ���Ƀ���2e�U��)���1�ͬ͝7hz�T5���/�-"]����$���e1�� V�`��D�4�Q�Xol(�z���?�e�;��B��W�)g�Mj���"�q� ��Ռb�C߷�;�ls�N��/ ����4��`ԅ�p���b莔u�})�6�Aw���*��v�����X�ʉL+/͙��{Gb1�'}Zu� �Q�������vԞ �O��Б*+�L��>p��9R$����m�Z��7+L�O�n���<�c��gp��y�U�>M��EÇZ �RK�s�ll���r��9�� ���l�T��L`��>�M�C��%vM8>��/�]|�AW$.��N:,f�G�W���f�����5Н�Z����� ���J�,����X��9e�0�/���Il`l�q���|7��E{�3v�3ǩj��rM�!ہh\4�q,��e���nG\�D%�^@��*湽h�&N����P鍧��lH��f��)�q������������<z�1� �/������K%�d���"��~��.Y�K?����rw�}�|9��W�\ �8��Ȩk%3G;���çnh�̌��м��Y4w`ـ�f��b��j��O��v)�$�<ꁽ��0P�h]��#|���dV\]����;���6�;��m�<36����Y���P�CdG10zzc�����v����#H�|�d��*�m��ޮi3O�2��Y����R�f���%}H�Ss�O����Ī �6�i�q�y�[�U��ݷT���������j�M��Xl���1����y�@������J=Ҥ�̬3����Fu�K��ď�@��* x�#94$�uiI��q�����!��9�&�L�(q�4��M�/RӔ�n�l�kB��_���M1:��?‐�$'�H��������U�����(�����q�8l��Z�m��Zãu2�?c�x��_%t��잝��m��u�\�}L������"�������I���-�~�S��`l��GÞ�F��ەg�"0K}:+�3af����a�J�����t۽�5$��P��1�i:h�p1m>�19�o�����f���Yߥet�?�~�a�t9��� ��̸���RJ����QS�� �ܺ��V)�����[V{̡3{Z"���&愥�����Q�g��Mj��R���^�Й�n�>�@�K �l6T2^��܃T=������jo�c (�Vk�:<�;�=��89R�6�уqks����u���C8�UM������~7�W���G���$a$qƁjX��'�G��;�2���!%�~ ���z+&z�6-�s��i��-m���0��ڎtGy��h���`���=J,s3Ɯ�oOt���~�)�����<�5P�
Static task
static1
Behavioral task
behavioral1
Sample
09f305f238babf5b962faccf5cdbec3fc21e2793b799e83f28f2b9a44863dc4d.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
09f305f238babf5b962faccf5cdbec3fc21e2793b799e83f28f2b9a44863dc4d.exe
Resource
win11-20240802-en
General
-
Target
09f305f238babf5b962faccf5cdbec3fc21e2793b799e83f28f2b9a44863dc4d
-
Size
3.1MB
-
MD5
4ce448ba47bda200e9e14c7539e8bcc7
-
SHA1
c292f8a22a71143fcd1d7a2e4783d2154fdf5525
-
SHA256
09f305f238babf5b962faccf5cdbec3fc21e2793b799e83f28f2b9a44863dc4d
-
SHA512
8dfbc0d943b612f3eba6c8791655efc2b7753c55fdba24b1dc9618cb3462f7c42b147eeed6e04498f5f56679ccb2ea5936b7a7f6830bbe69b245e091f8873c30
-
SSDEEP
98304:1wwqQuqcpgy8V+tHl4wn3ZQScOpVqS84hP3:1NWQuH9ZQScOD84
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09f305f238babf5b962faccf5cdbec3fc21e2793b799e83f28f2b9a44863dc4d
Files
-
09f305f238babf5b962faccf5cdbec3fc21e2793b799e83f28f2b9a44863dc4d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE