��l�\��� ��}�)�>A���-Ϥ4������!U�e=���h p�D�L���_5;�����<���H!�0��`~j�����?sض�pP0�9춈 Qn�4N��`1폤>��\���"dm��u�xx��y�jA�K���?�we���|�Mڬ{uC�����P��d��Q�#�c���|��t�O������R��x��qp�1���X��U^�S������9q�5�-�Bu4h��Rvӹ��L �h�a�w�� �zPg:B�ֺ+���&�ī�!m :�U�>��D%H�a`ꗘ�� �IW�6O!p�W�Æm�����Ī�_�6�F�z�߳��pj6Alo�`�ʀ�%��!9�̓m����g�#���ⶊ~��c�9�X}O�b2r�ƽ�k:��d��SB��Я?�����u��:�� ��8�ȃcP��VL �k��r@�N��K��M��M�S/rڅ��}{��'S-�z��ˤo�T��g�#�:���;��V�]���.E!ӕ���bC�6=EF��tG��m��Ȅ�X��el[A���uد=4A]��R�x������\M5�����g�Bw���>�LI~�_>�Ӎ�E�s��Sm+����NB�q�����dI�D"��R�ҿ]*�/��j̋�."�9o�,j۲����g�Rr�����|�\�q�V������U�}�tb�1�X;j8�7�&aҖ9���ک�3pe������M� 1a/�"���/�p.Ȓ��q��%'��n���U�Il�!�������B'�s���s��&����F�[Fi�'ԌFZ۶�kDXIg��5U#`�ϯl��~.{�oxr�I���T�.h߾�챿8L�7�o�oZ�^";$�͵��8�i�C'���I%r%=��"�����Pr�R`�v���C���ds�Y�V���F"aR_�t.W\�*(��CY���.ןj�O�v�� Y���,+u���g�q1l&l��I5z��?�|E,����DZ6��Z�ܖ�)\�@S���~��~I��M�y2������ݾM�x�4��ZW5i�� "��O��4��R�! �Ox:���Џu�k��?�T�ޛv㭣�K�*�h� ��q�*���lj ��]l��e�1 *�[2��Kh�� �C���O I��L��h*����gx��n0�2�0gN���A��%L܀��vl��=��V�t��|gA;'b�KR��+>�",���;��$�z�E�5:�� ���2���J�Xx/Hq���K�voT��p�x�� ��$ Qb�����<e莬���T��ˣp!���>4��I���i������m�.���d��Sz��W���pG�s"�Y�T�ռЊ��l�ͦ���NӜY ���,SS�T���?{�!S���l|�\T<Q ��O��ɳYe���U+������ӆ&w/�w,o�0O�$$�E���cewH�p0�v������ P���=8R��\����.�>߬����#�� ���s]Dx��i��N�2h5WV�˩���J�m~>�-���f+E���C��FY����: ��������bs���|7�%�Bab\�'k�������R[�T=�)svo<u��U_2�@h��!��K��A(ͼvl:=p��2D���'E.�ٟSc������KW�MS_�x���k�4���T�㙓��aMr�wd�I��J껢��'G��`�2@*3ax�����U��K�,� �����tz�(!�+���A8��)�m�������s~�UER�KD�p+d�(�-�}ϧ-������9���X��ՄU��rN"������hْ�On�5�i��"���'��C���F��ҩo5i�C�a��X(JW�%�<�_�S'��U�{=u���3�y�q/.x��6�EZb��@A=]�&��:����*J������(�WG�~�R��<�Y�^�qy�����=+ɏ�~�5tt�/]�z �}�܍��Y�:ׁ*xwj"�럠u�������T1d��])���^i�!�^C�[���;�����j�`����R�X{&��2��o���6Z#�u-�x�S�0����N������a��xɰ�OJe{�@�bE�tx�nJF����E5�S�è�7--x���i�uU�#�A@��6}(,PՎB��`������aJNL 9d�~Kqe��1�먶��,�3���|����1~��6��T�b= ���L�Э����O��݀���"r����8����p�&O��J��Ç���#�������[m����C����Q:��/eͼ{5v`'9[����O����t�P��k�Bw�H�?i�/��Iֲޓ>�Z�! pD�~�p��T�Aɓ������?�4��������)a�:��wV�U�;@���X�UC���a 7��2O����V,��:,x�V�?_�҄�So�`�y�KV��|�眩k_��N�J���bĩ��l��4L���h}�Q�Fv���!�T:�=�j�W�Q$���y'#���hg�G5��тh� ��g�S�yߢ^�x�UL,�G,�h�� z�B*�&u��е1�Y^���-)��#=����s���i����y9����Cf�"�� �u("Њepr���,�1vy�gb��X��������dKdz�����Ƿ��ټ�_i�a_��H0���{����U���_��,�)Gu����a.Dc�F%0����~;�w�L@8�x)o:�Ula��w>�l���d��<:�d�Ŧ?q����y\�{ ���-{(�8���'����JCC���&j�z_6R>�t�ɳ�'���m��Jf#ؓr ��=�;�'���9�>�eQ�̪ǭ���ޢO�gTB�����ؙ9P0��@5��Ϛ��H�Տ���N$!p���|�.A�n�U��B��|����&@PX.��䩝>X�T勔�*ܞI�.S�H�قx':��dy��\{gؚ�,NeX�N���<ݸ�?[��e'��I1�$������͟�|/�o�Y���-O*��ui�"��_��vz���DFqk���J~�� �ro��,�/�ADd�w��:�jF��\z�+T+��c�B������4���E4`7dd�8Q&��0��%м��
Static task
static1
Behavioral task
behavioral1
Sample
f315a2a447e7e12558fbbe130d3d4717d94135b5fb3e0ff4962c99218ce6a45b.exe
Resource
win10v2004-20240802-en
General
-
Target
f315a2a447e7e12558fbbe130d3d4717d94135b5fb3e0ff4962c99218ce6a45b
-
Size
2.5MB
-
MD5
5641cc542ca4d3033ac0af0f2c31117b
-
SHA1
9945739df5548268d29eb279507392bdc7efad8e
-
SHA256
f315a2a447e7e12558fbbe130d3d4717d94135b5fb3e0ff4962c99218ce6a45b
-
SHA512
c74227b8b71feb5a3a01f129c0842cde6046dadec570fd4bda410a750bcad925a35ba2bfb33d2eb58d2e394acb7c03d21a07c0d121e7088c9add7bb9bdaf5216
-
SSDEEP
49152:mVl+n/kdNKihuX1y3Vt6CWARivmCyaV/4XMUD3AHMigwQ2EeBU:c+nszKiMlKkNAQvmtaV/L1srZeB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f315a2a447e7e12558fbbe130d3d4717d94135b5fb3e0ff4962c99218ce6a45b
Files
-
f315a2a447e7e12558fbbe130d3d4717d94135b5fb3e0ff4962c99218ce6a45b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE