7�Ф�U�h��5a��O>S& .���=y�*����d�����?g�����r %1"3��d8 mv����_P2I(�8���[J*H������Xg�%6/������I{���/�_�ZZ�'��������q�|e�#>H9� ��:9��F� /�Ama�PB�U�If�A%v.�7(��^�n��vI�ʦ�v���5F��>��w���>4�� ���W�,��ӭ.�\��X��/P�����`_S;x�k���RYV@vC��uΚ�(�H>��ju�y����X9n�� 7��z]V�k ��4&��K҉��=�(վ���>,�"u~� F,/�!4��l�E�P<�/���aV�q�Y��������/����mG��o������N� WO�s���=������Ũ W,�.���sI]^r��q��J�qWf���(�At$x��i;���3�4������@5= �����f)�>�Uc��P����;�6�zƨl�%����3���|#�����\�s���T���L �-�9r#��BV�UDO٤������:-�D�F\ܴ+t/jN��<��Ug����&�F5����n=귁A%����:v��W��W����W�$�G>?���(z���VSq��Խ��g|��M�� -�U̼��(��q��z��5�u�i���l% K;͇�ٺ�t�wb <���j�>�?��^�冄�RZ��g9���9��ҷ6�4I�eB��2"�y�JOHP��V�t9�M�v���^iD�xA�m{ۉ��s��;�@R�e@\c�g���v$@e~��� ez6��h��>����ي���Q��5�(1zW��o*-���]<<߬�_G|�}��/?���gu����d���w�Ō��&�jw�������an�mM�݈ʴs\( ����s�`9��eZ�� ���LӒ�fb�\���6vn�ܖĤ�Y�|�� %��= ��t���h�a�JrRF��w�����"f�H@w3dO��ۯ�ˊ�F/�/�Y����8rv���a:?�@�d�Ui��\�P^d_S옦[�N��w��R/�`��"�B�[1��m��%z��uO��L���D��r_O����&�-�c����K�� i�%�Q+pt��3X��1�1"�4oo˥i��i��少Gb�����,����"|qN��Xj�Ɂ��0T����"Q�r��M����,�s��"%MR��k(�k���^�f�Ę&���F���rPvg��O^ѷk��ӷ��o�&}�����4� ��C���%�V� 0�~l4���A8��&��>'<��W�K�ϵ��k��4�sZ�t����uXs;�������\�X��Wq-���5++#�s_S(om�� �d7P�n���KFZ/,���)��ϓD�8�"M[?�N���jH�~�J��6(��8�����ġ���=Z��b��`8Vg�շ0���NJ�A������5ꙺ�D<h��_>���N��r̃�P�|2=@q[ߘ�B�����(��� ��[]��^�`4εh+YS���p�x@ӣ*jeBnIoYu�: )�U�����w����`6F�j���ኞ]����h��j�<�2����A�� ?����{��7i1���3~�W�[p_��a��NAH���cv�I��;Z�����A�Md���6��D!��{<�z7�-ݚ�ܖX�#^���1���S�p���0���U.� ��t�6�6�i�G��r�M�i�#��s������� dKzL�_Rb|T0ӢH���O����|o#���� x��S�E��̸���q�?#c�����>�4�0�#�#|ޙ�����Ij�N����-e��}�)�Lv��:V����E#K[��o��2]���q �#+��i���*չ���#$�o)b2��C�yA���5[��bnSf�������/����Њdh���t�¡q�Tr��?�T�Š�q� )��b^X���S VEZ��X��`�5�s�4$�dXP;��?4��A��9�����n~���;��Q)�5�\G0�E�őFLo����aK4�]v��J�A�T[�rS��¢�`��ytR�}�@�h�HF��P��C�����'i�ev�0Q@iDe.��w����W�O$N� �=o�N!�iR�u�'T�#��\����g?�+��IO�8�.s�YF5���g)͇������~��e�U� �Wۛ��@���Z��w� ���T����/����.���/���f�L+�5|}k����/�|��Hg�>�����jaϬ��9��-��pv�V�߾^{"�gC�ɀ�� ?��(��X%��Ѷ���!���� � m���c �a�$ܹ���w��:J�L��K,B�h�G��~!]�,�������Cg�nt�a�q"u�?�������O��,��K�o��}����a�� :m�~���t9��h�uB�XD�����_�j1���a�I ���bh�4�r��'M��+ss���\�V= ��Uޔ\oњc;�s��OC��TN2���h�-l~�V�JPr�cG+��v��!���A���_���O$_�/F� ��wD�S�� �x8���d��04z7R�Wv�q�-�2u)�;�S%;��א@Ɵ�E�}��W�x�Ϝ�cwg-��:���z������B,�:�@N��|�}(� Gݴ�mj�[�y*˗(����� �:v�����,z��%S����B�[�kr��?S��� �>,�Jw�������M��At�mOVݒ�-h�-�m��J�p%C�1�?�sO��`���-��A��w깧k�u�xA�[�8]��w��o�̝�IX��A=l��Lk�H?ː7^!��,q��/J\h}?$��x�+E����g��`�w�@��� �j��u��{�l��u�z/*~\i.�(�n�X��@WM+M�r�3P�v~��U~C|ͥ���d����:�u��z]� �E����5>��"fN���vg��sk"���!�����.-��e�)�؏��UW4J����p'5&~/ �!vj�T�$?b;#%����3O�8�6E�� :��+�}��E������%T������[6^E���bm�R4�� O6����� �� �_��-�Ǎow����h4!����)EB��S2g�U��A?�"����N�33�D�}�����a!#`릅��s`���kp��}������ h8h4N�H5�Y�}}y:F��P�J���o�|(5��4���fs!�;_]}�6Ieb���[�!���ZAx�v����c�^ �,�y��ԕ7�;̍��ϻ=��<�=���ɺs�� كT��q�YG�^9D�@7��`�Gf��o���|$^����=!˥fXk��C�̟!�dc��1#��2o����?Ԅ �ρ{�<��5�=��G��*��:�"�,j�_?}Z�P �yc�2zQY%��Y��hW+WG8�@st2$���ԙ�C�X��齴"θ�S���JϨ+�*-y�@�� Mb��s-�/_i�|����dy�Q��b�U�`a�E��(|���h�9͊���0p�}!�o���97�����$z��t2fY+ �F�D��f�����!���ʴ|41��~�a�&0jP,j�a�8�9��pQs<s$ዪL�BS5Z���#P���UEd��~��9ʖ�߀�.�)?��J��ؿ*��ս5S6h�@������A �ɝ�MB6��3�?�J������T{�x�t��łCԷ3�c�E�!�W5T��js��0��qX�;.�wb����&�b~=>�K��gU?�:ؾ���
Static task
static1
Behavioral task
behavioral1
Sample
f784a1f53df020d847aa42d8b80bc9b214d31a4228b7391f3e79ff7043907485.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
f784a1f53df020d847aa42d8b80bc9b214d31a4228b7391f3e79ff7043907485.exe
Resource
win11-20240802-en
General
-
Target
f784a1f53df020d847aa42d8b80bc9b214d31a4228b7391f3e79ff7043907485
-
Size
3.1MB
-
MD5
c055468faf22553333bcd14c731e083b
-
SHA1
7efe478c07e86a7cfc6611aa13555a73fce364fd
-
SHA256
f784a1f53df020d847aa42d8b80bc9b214d31a4228b7391f3e79ff7043907485
-
SHA512
8b0976e500696e15a6b54bd455dd691d960c3c9c8f31632adf7b06aa7014a785b82b9aee50ba2701fac7bc8beddec014e93b32a6b3d5b349c73dcb4dcfd3b2ae
-
SSDEEP
98304:t0YbFetFy7KufExfHaXtAOb4N737r5LTTXY9HjwIF:t0Yb4y+DPaXtAnNtDiwg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f784a1f53df020d847aa42d8b80bc9b214d31a4228b7391f3e79ff7043907485
Files
-
f784a1f53df020d847aa42d8b80bc9b214d31a4228b7391f3e79ff7043907485.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE