N�Zb�#��RT��v?Cm����]t�Z�0X[��HC[l��������u�(*K{���ݸUug,�,�a��?6N�� ��+?������0��c��!5VwS0���������G��cnHD����?�n��[�k�4��M��q��@��Dx�1��'%���� lS0c�Ά�&MI) ����K$��������$��9��7�V�Wэ�sʣF��vg�ҧhz�� ����b�(z�Fj�G������s��7�.�h��v���J�� �~�1 �������9y3,g�k�1� n����Hח!#D1H!��Y�^y:��6՛�=bҿm�*�j��G�V�՜G/*_b ^����p�<��O��1I��,������:͙�a^��(Z �����L ���b��OZvz�P<�^ն��`r���In<pӈp9��?��nȆ�F��'�??J���Sܡk��V���qo�6AV/�ӅP{ ��tZwEG��C��� ��������s�*��q]������Wj��'7�������VRJ��?#Z����8�,��n+EH�_ ���A��ZO�:�0�-9[KXT������z��h��tb{s����(��xp:�NYtr,j��+�*��i�S����,��SG�.8�}=�U�mm8��)qbq����i����*����������o08��f�3�����&:�8ӥ{ (P�d��;/�{��5�at8.3EG��=rx��v������[�^˧$v�4BF��0�<�7�����q{1ù���7c��.p���60X1<�Z��^A�lX��Lm�:�53]*F_8kR�o�hm��&�y1EQb�W�c�u�g�v;��j6l��E�[�r�)��@k I[k��SZPw�S������EQ�h������h���5H-= �[�W���ֻ�7�i_� �������3<��`=�ġ(�*��g��n�}��b��&��� �v����P�6l�%�h�D"+�r�=!����]Ej�ӻ\�5��-e@����÷���V��� �so�.O�x:ޘb���vl�����_�Ҡ��t#�!Fuk�.�3>}�����Jh־���l,g�<)�-����� �ʓ�|MPe����ܺ3�LD�&�������0�<f���*-:W�/���t�o4��H��P|���8�X� Bư���ƥDLp��<⺔�Xe��u��-mxŵ�o���.�'�ĭk/ͳn��{�?��E��Jˤ�aX;*~�T�Ȫu��Ēσ��N��;�Y��}]����5p��C��)rWNߏ�+��K�����dW8mV�X�H���^C��v��- C���I�r�g�HB] f`oB.��O6�OGbZC^��є�>A{a���:�!A>��s�7��i���8�$���3{��h�*�j���{����x�*�k���e D���_�IO#��j�k�wQ��'�s���v���<���$pS. =�D�R���"�kL�`�v�����/����ϸ1���)p���}�����/�U�� !z�� +}T����ji�P.�K�@H�#�Ӵ��5P #������.}���Y��0� oz�������A�:� ����^�H�I@ ��ZB�Z�"����[lYl�7��aJ�7u'@3 �m����CoMh�8&�[�%H�5Z�d������#�젅�� 7M@-RN"��K/[&9����D.�P��e��.g��rӸ�A�����pj/���|���2Y'1��$=R��?;lp��h�P��,|;���L�Vlj>XS����� �:�[@:_PbK]֧����vy� �@*��^�a��9{n̕a+*�,9�m��`�Wi��E��0wz�58 -�B��NQ�Ў���؈��Oʁl;��Սq �<2͈�7����~���0���f��ç-�e 8,�F㶟��k�vH*���>&3��<v�m���AP~ ��9a����?I��f�������� U'x���� ? ���� N��c�Qa��q�w`8<o�Iz�AB�b����'�a�8�;"��ϗ���h��W���H��>���ao��;�����ީ���$X�O <vY��&(�q�1���[��u�B��nsMU��R��3s��f��=�G���R�^�J~����H��R���B�Rƾe���[jlS���9����ef�����m�\�?�KҵA9�M�a�L��N�Sa�U�ҚgG&�]r�k�B�%(^W��eb�զ�5��<�0�<���g��6Ca����f� ��1�$��� ����}�j�?"9'�NH�n�I�a�G���������d�3��.��\b�3���5 �\�Zj9f;�D;�6ul4Ea�)� �z-�]vK]m�;-���^L�t�%�|�ɮśl�$���m���"�SFS4��6����Wi���i�`�Y�ȩ�a�&$�� g��%}{ͧ�`��.\����1�����:���8�����%.������D\�9�C���� ��,>��dK�TlVjbNg)�Z��Z�G�ʅ��������S5���x�O�����L��>J"�Xs��t���f�]���a�����śm� �����س�fh9�|g�G� ��%]�8�$l$�f������2�绬؛�������d��3C����z{� Z�&��k2n���cX��E�'���C8#>(S �Í��9�����8��X?q#z�Eٞ���1i;$���G����J�[9���������?C*1B����[s]pl��dZ����!�W*�C]��0=�s��CϺ��٢� Q��BxX�C6ݿ�߉�U�C�_�7�t0��Z\�Deuzg�9'R�E�/m�^�ɕ���N=�x����dû�y����� �����[gj-?��䝁kA�#��`�<ƭ�(���K�ěY�*Ue�x�idY�i[��3e���S/Ě��#��=nI�����<yJ·Gn�_+4�A�=kd�F ���k'�Y0��٨�d:!�ᓹ�����`%�}`����ݚ�"�t��z�aW2 .�Ar�w���Oc��N¬\-�y��Z�C�����'�bC�����ٙ���3]�=(_*�3�z���==�=3Ing��3���6*�wr^�Uo8
Static task
static1
Behavioral task
behavioral1
Sample
90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff.exe
Resource
win10v2004-20240802-en
General
-
Target
90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff
-
Size
2.5MB
-
MD5
197cdae2ac2f0fcb4e1a34154ab57502
-
SHA1
a50b7a8d17c95e6cbf5239f9fd05a2e9c5b7e651
-
SHA256
90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff
-
SHA512
9d5483e5f8e238798df5fe1177215e5ad7f4efe45e65cebf7ed7044ff4b885a4af2598d4561bb894a74983ae4a6b0accd732fb74e3657d6aad2eb73a2263975b
-
SSDEEP
49152:5mMy1rMEZU+OjfYfvFtchdDojuYLTujlDS9/ObVWO9rCWQWlank:5luZnOfYl8ojxXgS0WO9OWQmG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff
Files
-
90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE