a�r>S���j(���Y�Y3 �����gݓ��VC �!�5��6$�Q$�:{��G���Q��1P&>��2�9;hC�9� ���o�߂^DN(χҀ���z�qF�n ��5<r5��3x��@���7�eqf���"��M��ߴ���|�$����M� �o\t$ Af9njh�K��I^�,�$,���d! �i��1Ƕ��z(on0�,j�&��ym������V� ��L��c�\k~v����3Q��K� hSN���Ԏy6e�n��뙔$X��l�|���{U�r�I�߸���}���x�������PjQj�aĚA���w�&�܊�������R��o��&���q�g[���:����=7�0'\U �&Q�$����� �l<��|�8T���i����XT��NsvA#<��+0���Iݻ�G�S+�|p<��5m媓�<Z8��ٻ/�?��zR9�\B�������þX�����gc�f��#/[��p�J��m����֦��2ߏ� � �"��оĤDy�����ckE����t/�8iOy��FT���!��X�l�%S9��r���� ���8���kX6!I�Nw�s��mF~�ؿ�(�g�����T^�L�ǜ�)6B� 0�7E����A���.�#�[9���~�� �)�<�ԝ3G�(}�K8�b�����t���z��8F ��6�kxӬ&�Z�ֹ�����(.2��E���/;Rra��@�\Y@�����&�ˊ&�Ϗ2�J��� l�e �Ğ~|��� #Ƈ�`S����t�tcnb�.s�A? ���Z�7?�}w�ǏipK|�a��U�,�� �P)�����B��*�* ��\$V�>`u�$Y7HŤɘQ�Ҝ���1]u#�=��y���2<�>)��7<��U���^2�M��"%Y�y�[�N�����^iH�mp��L�O�k��7�3����� D���eADƔ��<~ ����=�?�)��v�sB�oH�U���t,-��gX�� ��p�p6�~vq��wZs��Tټi3�6h:��*���p7�����ēq�����a~S�)�I�z��k&\��j�G���D�9���"˅�"��ӵ�|ъ�ڗ�(v�|�Ǒ=�٣<��1� �d������^sc��KX� BD��K�:�./�d�S|�4�KYP+q��a��戞wV��8�Q�Ӂ?��H�7��A %*kɺM���7oQ�n [; e���"���N����rjW^�����y�V�N��!c������\K:"�pb)\�s�Q}�馆��c��A���������).���m;��(��h�J�n�i�@��۩� ����D�Qn�<i���&v�.���o ߏZ�yh��!����fN��2miG������x>�gj�U�d�l���YZ��<�>�� �<��B�D���S�f�[�YZ�Z�T,wmm�z)Q�!�뻷w�fָ��'I��9�M��� ̑�W9_�\ׁ�9�x� K̄J(����@��uH9�f�t�$�0Of��ZH����1Y,������%� �3$�i@���w�XT��7�I�N��R!����vF�t}�8 [T[;�����j�(��y%�SC��܅1�u��11d���z���HUk#�2q�������t>�RrM��J�u^6ZJ�T����3�`>H��b�`���rӫٍ�D���!+-��K�� ?�:�d�{���9˻�����9� �O����̏v$��b<�RNg-R�*��@���m���w�O���5��n�~�^�M1"�V� �J��� pЦ�J>�=X�F�O������R���b| ?����D�qV3�e�2��m�$�%pĒ&#��e�_����I�y�V�>���kxۭx���m_tT�F�������N��7���C?�9CVrs��b�@n��c97T����![��S�>�O=�q<:���>X��@1���R�#j�a^S���tnu�o��B��9��.����y�� $#�~F{h�G��>�h=ZADs���,�o�'ZS��K���W�� y=��\:?����ih��'|28_��������� �χ�k��}u��D����x���� ����y�Z�Wv?��d���n����ڮ˭C��i�~��/-������? �����q���//� .�F3r1*4�S�|�S��D��8�O(���C#���E��/��ҊU+ HR�Z���������а�Df�|D5=[0�7��2$��a��u>�oH1K<J ����O����{�H�{Fz\*��; 4༖#[(�y��x��Ox.u��u�l�BI���yT~�p��� p�лȣx�խ�+�����=���2�E���x� �Y�H��8%�����v� �����:J8�-A]|�5h�l8�6x�s� !�+�g���v���]��0��!>��ʊ}+Ѱ��1,�����E�@�;��� RC饠!��qu�Ԥn6��)%s����2|(��(�p�Z�Ъ�e1}i�yg��t(%��=>�� �5��kr��|BR��N���n���S\߈�z��z�C*�� ��d���c $o��C��)��f�aK��������诓a-r1&�彉�͆�Yv$ �=T�AI7��/6�!�q���F�*N�<0༒���Y�8�}9_�_rH� ��ʡ�[����N����YS�~�L�$������n\?���c�V��@��3D�6��)7��`c���䍃/)���A�$�CZdgP�l�|^F��3̽�v��r�5���8�� �O��*(Ƴ��/ʑhҍ��T���E����}������l�Y�ؚb4��\��FB�OJ�Jͤ �->� ���Yh0��W)X�'�!�.�"��� +��{�juѱ��%-�^����?�4��«�X�3�ې6����,K������~�1JVl�w��#��q�J�v�����#�a�*���@-�q��_X ^�"���Ж�`��{`�W~m�v�T�=z�5tz��0�����icw���!bp�pl8��!��2fF���nXR��c�^���ۊ���z��1�y��A)�WQ��W���V�G3���%�=w�lG)�� `�r����0���9���k[����D,-yG�����_���'{I�1-59}�8�����w��dN��˰�A7�Y5SN�vZ�-P!ТW�?�Z�n�w��W�3�| \%����~3����pz7�fȀ� ̒�r��b�1ؔ����Wj�s7��]�H���C���b>�A��2�*��c8���kԠ]>��$ �6�u�3.��;#>\��C�o�%H��Eu�F|�x 1D"N,>&����+T�[ڼ�di��v��L�5�ˣ����������~����XY�N��]{r��]��)L���gU���ͦ��X�D%���M\��`i��92h�E�ײ�F��GΘwB H����(�����A��s������^�V����j�Ic)�?�
Static task
static1
Behavioral task
behavioral1
Sample
e8dcfead94c3f49bece47aa39bb1b45cedfb32d376836ea6a0723ceef899ecd7.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
e8dcfead94c3f49bece47aa39bb1b45cedfb32d376836ea6a0723ceef899ecd7.exe
Resource
win11-20240802-en
General
-
Target
e8dcfead94c3f49bece47aa39bb1b45cedfb32d376836ea6a0723ceef899ecd7
-
Size
3.0MB
-
MD5
18a8a788c941ab73905461d2f8c86c38
-
SHA1
cce174a45648f93488b3d9b39c8cc30a0ca47023
-
SHA256
e8dcfead94c3f49bece47aa39bb1b45cedfb32d376836ea6a0723ceef899ecd7
-
SHA512
71be200a095c1f4a95989ad9debab252e0e28acb06a464c4f36100f933c784ee2836d12208ff0bd5fe0f98518876dfbf16c18240f9e75e89f2e2186bd5691757
-
SSDEEP
49152:bEEYNOLIom5oSztHTQ92jTR+uEDLCwaJNqGGSS2+UtLquuUUyb40wztXfkIrADyy:tYhNz9bRqDLCcGGCtRhHvKtbADI7d+p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8dcfead94c3f49bece47aa39bb1b45cedfb32d376836ea6a0723ceef899ecd7
Files
-
e8dcfead94c3f49bece47aa39bb1b45cedfb32d376836ea6a0723ceef899ecd7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE