���h��<���)�PrgE����nn�1 �s�PPP���R$/�l��o�j�o�5m�z��b��q�k�tt�4ܮ8jI� ^��&>����SlQ����7��xNR'5۪ҥ2E�r̵ܵ�0�3��������#:!_� gC�[zړ��~��,�p����`]4u�*��\���sx���x[z/K&�}� �pI���ҕ1=*rE��r�# �gt�����E���C@�-���h�Њ'2=�e��=&F�X�̅"��#�Y: G�',"aĊ�d�i��Υ �3�CC��������1���d_Us����%ߐ_�?b�Ș`~j�����,�� $fe�rʏl����en����-w�s�Kp1��ͦܭSԽ�'���_����ۀ/�bj��ӥ;Pw˥r>H�}O�(aO���zT�\U�nl4��mBO�8MQ�ЋpOI;�'K�46�J��+�_2����98� ��k�06���?UY~���7M6�d����6�x���w���/�,N���uy�s�3����dAa'���ax�0�?�J*\������o����������UdWp�o)�RF�L>��e�O?奡����"�Pg�n�*��2���EJU Ag_p�{����^�DK��,�K �������E���f���3��G8 ��� 5z?u�6{�i�Σ{�oF�;Y8��JgԨF�Pq�|(��K1�r]9�3�V�#�E��L8���mN��)2v���NX�a��hɶ��҉�����`�F����Avx�98� W��\79��Gp�"� S��`�����g�#J�f�I/*@މ'���>Y�˔}�l��E2�S�TI]ʢ�b,2@Q;�Ƨ{�y�d��'k��>�r�_e�aFM����yJ��RdvZ^��OTL��+ ��w�%]"����w@35l��I�J��Q����'�cC�ry�wk��f�U�\kI��T$bԁPp��5��˳�e������ 55n�K����U���P������ʄ�E����T���0h��\�%�p�2o*T���C �t"����B2�o}� ^f�mA�^J��c6���Mt �0�bb�aNL�Ac�����Z?�o�,��HF�/?אU>�>�^v��(�R���)���ʜ�_i �l�F��X���ly������@�מ�e뤛"4��А"�g��@�'�m�>E߸1��|Z�ph���u�wt�U/7R6�o��<)�[x�V^X�����+��L�ƶR,`����ݢ�Bh�z��ɕ�f��S���2��M��� X�4�e� 7�����JK �n��Z�]�5��ki�����a��Bd�8���J.My�~3"����6d[X%�<b�,pT�k>-s8E���'D�G>������ ���$�^���RG�J�zզ��4�&U��;U-Y�����=��E����M]���q����ʉ��&��L� >��hk?�~��oΩ���EE=�����{�?����mYak-�������x���ﳌ3s�2h� ~J�\"��w˹�!ά ̇x�{9���<R����A��My=ѩ�l&�QvC�uٔ �Ĥ����=����o��5�v�����C���*��=����q��j��|!a\X�-���!�W�K�������<�2�-x�� �-H��2�����y���)���H���(`����q}r@����0���R�'`ؔ �3^�l_O�� ܣ$g.��zC��4�[��̇WEڱ�3,�G�E�yR�����t9̎��|Yc�~S��18S�x4��yxi�I�� X=��_=�PN ��4"�[j०�^'�.����}7�t@�EkV�`t�2�w�_��P��Nm��|O,�6��>A�J���rS a֑~�+Ө���͜eG��EQu��6�ˠ���Q��Z\����H�z�@�I?u<�R%8*�sDZ��rY!��\#mm�)���P���A�z(#�̓���0�:>���]ԲM8!����X�Nn�N�.�WFX��6��b��n6��]QN� ���0�D�X$��C��=ޘ]�c )�{�&���q���O����նu�S���{9��?75=��� ���3��oI碦5̓/�G ��"���M�DD���O � �ƀбM#����|MpQ�y@c�cD�}���a���A��\ӈ�.�>�*�\�����$V��`4��Rl�L���;TPbt�ܷ���8����R����@�����:I4���-4`�0�ʄ����&c-id5�Ge��`7b+�dY/|B]���R?X��Ϋ�@WY���F�,O���*mͬn�=�����=��]����g�1�! V&*v�M0@�z�@�l�+)���t�tj�i�c���=$a;�4(�1���� |�s�����'���rD((a���9( O��gx�5>y2����v'�~%k+�J���*���=C�hk�y��Cߝr�خ/��b�����������Td�/�mI0���Z���E~�R+�qN��P�g�����#6�D����Q/��o. F*�����3{�Q��T�.�� 8!>�D�����DG<jtbC�Z �ɛO�J[� ���6�$�%f���^ �ߐ÷�@"o��\�����d�x��h���G&#��e����W�����Q���f��vkcǽ����;�>];�]�|S�2�@�ߜ1� c�{�mԬ�u�v/b���k��a�(W�hM�MQ��׳����B�l�ɪ��]$*h�|���=����(j~E�ŭ��ʹ2W�Fu��g�K��sp�M��q�� ��Hl��Ơ��(�)��ߖ�\P+v�C49>���9�ݺ�L����^�CUFC�.j�hn�8�Y>eN�Lͤc��P�U��q�d����q�+SqCX� ;��a-�?��� ��I�in�� ���P����9���J<q'z�����V��+ȭ9�+�g��ps���XԠD=����>6/�Ζ�R�����t�h~�02�A�v�ӣ���.!8�S���7������������J��Q�YI�{�T���Ih�-v�� ,*_@̚��e��'�B�[M�_֧�C�0�lL
Static task
static1
Behavioral task
behavioral1
Sample
2c745c16c255596741ef688f64ddfa9a5b72edf223eef341a99224f09dd59be8.exe
Resource
win10v2004-20240802-en
General
-
Target
2c745c16c255596741ef688f64ddfa9a5b72edf223eef341a99224f09dd59be8
-
Size
2.5MB
-
MD5
04934c905dbd81a16380ab32903ee8bb
-
SHA1
c086fcec916aec906a585c0bc23d328292bd25c4
-
SHA256
2c745c16c255596741ef688f64ddfa9a5b72edf223eef341a99224f09dd59be8
-
SHA512
ede6e252d9d9c8fef64a269d0173854964f17031d41f50b31aba53d46eed78b79fdaa8beb14ba3fdafcc6bd6841d758f9b847026f67ee1e84ff7af4e556480c0
-
SSDEEP
49152:f20FLOjMN3jrChyqFHm4Tazabe2ZxP957JETWWaPy7Ci:fXijMNHSyDza7Z/5ba
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c745c16c255596741ef688f64ddfa9a5b72edf223eef341a99224f09dd59be8
Files
-
2c745c16c255596741ef688f64ddfa9a5b72edf223eef341a99224f09dd59be8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE