e�*HS��?R���?I�>�.ڒ���\�Fr�W)7m�O�H�p����^�3B�a$30m0x��_`V��b�oY��Y6���1p�,ܶ�m����� NMt����x�v�����$�Оy�_Yթv5 �j�?%�ɦ�'�By���D�<�O��^�F���5��w�tY%:Y�\�w��)�բ��Br�iU1���j�w�oiM��1����["4��Q�����+�-rniS�K���V��L��1�QT���O-��:�`�A�����, ٔH�a��#@��ID�� {ͧ�6.M�C�\��2�"��ȥ�855B���ҽY� R�V>L���"���ݬT~7�n�ov���H���1�k0;xL�hE�6��k���Cč�W�~:V�l�-�GQ߳��1)@��2�Y���W�¬��a,f��o���O��i��`Td%�P>h�����ۻd\:E�Y�{�2�t���2�i_I�����U�כlR!C1j�R �<�ȌX�0(�M�9�v���m�3W�;�<��'1������[���N�b�D����j����HQ�y{ �uRo�ZG��b�cޚy�S�xy4q�?0M��P�QYs�>e!!_��E܁��uz&�;���0;�U�E�A�B?9��:�<s�� P�7�^ ��� ��c��{�Ŗ��R6�p��r�vi�;~���n��)� g F�c���P\>ё�����E�ߧ��YA������E��U$h,�8La$wY�!�������2������ v�E�|��+�`f5C<�Q5����C�lJ��y���|F����_'� &X$vr�j���xƳ���~�~?wznH>��H�#=��e�� �q�S�����E -�w�kqFs[�8ǡ#���c����'�|����P�fw&��ݹ��(��'�HW ��n �gxz�=r�q��y���q�����K7Ł�V���^@�۪O��:㪊m��_l(��:+�� 4��Є3��TO9G�WC-8�wά����9�`��ܜ\O%e�K�ś����䜐� "/[a�^�$)��ɌO��ޙx�]EA�7���L� '�%���Ͱ5d�k�;1� �8��D��D�����35��a�W��̒<!�����Bf��b(Ba�O�^�?��[�B%Ҙ������V�9�0��L��aY�w�"�7��]��t�yԛrb����]�kdIӝ9����K�˘O�7b��f)����l�����������naϔT ����hR+��wz���Ҧ ��M�4]�dJ����ѩrzI��{���dD1�$�I_���G��2�i��f�NV��M<�E���%!k��7��t�v.ڠ����|kف��ZHA�Ys?Y+�x�V���.R?�����c�o[���V��FP�H�?�=;H���9��IO�"��4t��NZf`nHj��]������1f�q�vj-�¿�m)k%�>�]V���+}�c�e��S`� dH��#k5^;��zZSkjm�<�8kL�8�`ϧ�W0�j�7.�dB� �� �Z@� ����F�m��T�W�F�مŎ�"�K��^Q*�_g��9�0�M�%y7Cx>�H�:ꋚ�Q���W��S'�W��s�����q�fc)�������r�^���o���e�%��C[�����==���t�x{�r����F�7!��P�L`r�%��s2H$����98$^�4���ةc�EB�ߥ��8�Qϡ�����V�L܁��C��Sf^���us�*Ip�_o���&hO��Lܴ*��zSE�kˇs>����JN��5�q�Ț�8��� �q��{�Hz��e��t�-�^���Zh R�o��]r�M�g�h��51�$���,�r�`K`dt�L����/�������LmԺ��S�d��0v2��ݗ�Eo�6�2PH2W���m��;>�ʕ35�����L*ʒ=�a��л<<�|� �����>��� �]6�f�xֆ_,�ZQ�(D����dT�ӓ�M�S�ѽ�ܱ8���ê>�j�Q����]x��"_��_�rp����%yh�M����P��gTIU����:]A�%$�p V��%�bF�ʫ(�W��uq�����F���B=��y�i���p��(����+d[u�e�ݸ�g)��U��q̏��Gjw�+`?����w�|� 4��7� �'��Y+�@w�"C$�M�``�K���`>b��|ʷ>Y���\�<˦�2Y佯*u%���]��?v�&�5�(��.(�4�-g��6����n8�Yc�ކϗ-0h�V�m�;� +�L�� �bE�uW/ͻm�6u�E�,ޘ�.R�{X�7qrz7�(�>�A�x�F.L�� Z舶��U�dg%aŹ��{��`�~-��̤5��]���^XP��|�ɤ��!(ƹ�n淁�ˍ�������h�Hm8hK��1��}�r�a?B%%=����H/l< +�0;��p�2���VpA�cK�h#�B4�p@������U�k3,�,�Ӭ�=�*�u��T��X[k5T�M�E�.�u&^I����B��5���͛uGj�W����QF�����nZ�9�ŐD��|�B��ۢ* ���"��YyA�d(��!ƀ �{�آQm�|_�X�iW����}e����-��SUZ�D#g��QD�̖kY��0��龨� 0`}��ߤ ѓn��Ҙ�s�봮P�${�L%���:%��Y�r�j���pm���Dq�=��.�D��V�����ga&��w̟��Аr��zT��J�_�&�����(%1��3��\�*���aȰ藭���wt��.~�S�<y�~�7����p�[��Bfs?G��X�'a���*�d�>.4�7F��m������,yQ�g҄}sxG�8����W���c�&���'���I��g4��V2:��tn�g�!���W�=!�ݐ�i!�4c����x�B0�FӶ�*�@��%�^��H����v��eBa;���8����?_o���W=h���#�6�<T]\��~������[s4m��VH�����n�h�Kq������_��SX�_�jol�RQ���e��N�R��)#�G�g��->+|aԉ'@��9lx�r]��f�iY\{��z�lW�v�8�2�Q-�ʑ,}�LV�:�Ɖ<�g�oCS"�*���CHA �G �p>h9RZ
Static task
static1
Behavioral task
behavioral1
Sample
13e53ce168deeeb29614c9e430f616d2c6f13009637d328b0fbfe5903f92d03f.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
13e53ce168deeeb29614c9e430f616d2c6f13009637d328b0fbfe5903f92d03f.exe
Resource
win11-20240802-en
General
-
Target
13e53ce168deeeb29614c9e430f616d2c6f13009637d328b0fbfe5903f92d03f
-
Size
3.1MB
-
MD5
d8238961ed09105855c4aa7040969692
-
SHA1
0165e80c25daef613d3afc58ec8263a09f1b5f7d
-
SHA256
13e53ce168deeeb29614c9e430f616d2c6f13009637d328b0fbfe5903f92d03f
-
SHA512
a2493453160555d1e60288d0c096be03649b45b15ac21b1bbd5d8d2be7a33c8d235c687f5fde8593e8e0d38b66239d66d90842fc3137549e9858adf010f334c9
-
SSDEEP
98304:WvIQbk/u7kWduXOVjqJUHkBFCd+gtg2cR:WgOk2IWUXOV+2EBFlget
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13e53ce168deeeb29614c9e430f616d2c6f13009637d328b0fbfe5903f92d03f
Files
-
13e53ce168deeeb29614c9e430f616d2c6f13009637d328b0fbfe5903f92d03f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE