2��"��l�S�N�Tr$ψ�(�H|�V��P}�]���h<��ѐZw�$�<��9Κ�V����T흿�Lo>\9r��吊�8��l�^SlZ&�d�����[���/Mb��F��|I��C=ۓӇ�6��z�� �N�YW (�q|8��q����4G �[�x��mpЂ3p�$� �?M1bp�ۺ���Xx5�P}nS�|��l!���m�h6!Q(�,�0��51�QAV`C�4�(m�(ڒ��F����&L]��)X�"��ж!��P�6�s](�w��u�e��&��/C���/kUl _��AWc,��46�R�%���b�T�+D��i`A�C��.�t�<A���r�>E��Ӄ熿p��;hC9��� �8�d�����8���F51j� �Y�nD��Gu��n�]R��A�7W�2i�0��E��RZ2��J��p��~w��剴���Xs�B�����dF� � ���������-�I�/�%��. ��(�c;W��!xwX���{vw�'iR��Dy3���5�[��v��{5�d~UΎ=%::�Wfm4w���2�z��S�{чZ��ES��Q�Ӎ z�~��z�|:�y����iK�v�������e+�c4��Ht�N�`��J��[�-�=��������Z�n�T�#k�s@����[B\ɂ档"[�������ֿ�� y���Ӌ��C�A/��c?�h|8(��;�[SG��1w����G7q%�apHm���&���)@�,5�u�ʕ��˴}� >�*�&Dg�a��%���/��}55T��7��F�Y�0�e�F��-�~���S����_˙��N?��t�ٝ������x�9������n�gT͙��hؽ1�#~+mÓi�یISA��� ���{9ˇ &�c�h>�bByLԈ'��[MI�{���Y�t`ќ%�`؆�tXn����n���З�Y���#�#F�e�* j�Y2��مzQ�%�ZbM����+0���������ա��V2�xbe[[t���\%E��� �7�cnD���ߎ�t�-�4{�a�#��f�8��L�ݠ��F�����$H���&Js�$�� R�5�dT�ɠ�ñ��7�E��\�/�q�GJ�&�J������M���{��F�����$ׯ���4�ØL � ����%ep��|�ک#�B���Wt#3w�;�W�ܷ(;N��֫A@ˑn?6����$P�*Fm!%i�"��J�Yt�����9O&H#{A��a�q�-�?K��(%�N|@�6�ߑ�{'pg"��$�[�U�ށ��`�����IڲLDC)��[�>�m��T�(7�rɍ+)�v��"4n��_�`���寗���/#r]Ggm�b}J�5R�799C��>�@��<8v6UG�����!3B5���^k2���&�W����o��1�XI�-.c��Ў���)QƎvl�;L���E�R0��rs�J��;���Ƅd����4+�*h'<Q�G@�:W��n��`�^��6�0P϶�dE�7�A���J���`?�����y;>g��r3t=�d��R���ǜ�ٸt)�����̗=8�A�/�c������O�)lyv�W��Qpu��VGP���li���-�%l��A�qkrOg�dXx#��`'7�X+p�Ye�G�+1i��� �W��� N�SOł�Ω/���s�Ve�=hWJ��:1�����OKi30Ld����#<旟������DZܾV��H}�67-�z���inn��P:�^����U'�����m���Ӵ�3�DI41*(Υ�8KV=��r4��Z��D��<S����R�����3�i���҆���^'��m���u�����W O|�����5I7���0<͌�m�kQD��f(��+e�)D�:5Z0�Z��$��Y���V>����rD�&�Δ��K6CO �g�®)�j/�]��P���9��"i��,ʫ�Zč+_������ ������^��4�/���L{���9.Jq�)��3\���?��]�y*�+�C~jϰ���� �ͲO�2�2�V�ߋ����D5[#���)Ɖ_ �=Lq����+��ZQiۭ������O�<��[i5�+]�hd�a�3�2�v�G��U��+��0��u��w@�mw.o�O���A��*8"8Gº�0Y�{�T�Q�3\���͕Z�ȫC¯��`njp$ �:V�vp���+D? �,��G��k d� �J�f�?�a @�ql��1�Sj�`�jB�7�C���ƍ^LP�c�BA�?&�5�`�֨ꡒ�����\�Y�T���0@f����:�'�cg��}筫�4���{gl�E!;Q�[� %�9m�'=�M��)A83�ݓ�?e����},��>��cH?��_0��Q���C�&��d`d��{&����X\5�"��-���O�@�4��w���bsè,K�vm�W([��T;���0]��dVm���q��m��]�R�:�Uc]����S}���4������J��@�%��x^�h�D�G���i�(j��dNa�kY��A��虵�\���G0 ��2ky� ������$��.V�@p�'����5�պ�z��L;c�¡�)�~����I.�|R������Dz��>B3�\� ���w���FkÛ�\����BaL,�"���� ��&�@�Q�"����[���!(|�!-�0�] KFw���l�s��$s�̘�,�TK�.���<S���w(�/����&����ܤ3�fiEz���jrZ�)�dB& �儆�y�=B��iO��|c�{M�#/3�+��� ��g��B��C�I7��;�U�c�w'�h�Uݝ*o;��b��gq�{�i�;%?�Uf�W;�2�z ��P��|S����CȖ��;�i��@���H� �C��*ouD@#X˧ �j�s����,�B�����p���o#6�\�f/i*��\}Z}E���M�DGɠ�\/��GȐ�~��b���:_c�=����qհi�����Y̰�%�_ C��+�orÁh��c^e��f������=1 �zp��6$��T����z�w�`�Vߓ}���xo�z��������k�Տ����5�n����1���N����VZ
Static task
static1
Behavioral task
behavioral1
Sample
10760506aaabd89fa0b68c39c644710d675d904e8c044995b2626d42a8ea2b7c.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
10760506aaabd89fa0b68c39c644710d675d904e8c044995b2626d42a8ea2b7c.exe
Resource
win11-20240802-en
General
-
Target
10760506aaabd89fa0b68c39c644710d675d904e8c044995b2626d42a8ea2b7c
-
Size
3.1MB
-
MD5
b28a32de9a12d2f4a544053fe69a3346
-
SHA1
a211a2eed3f293818aae0e9dc6c2d8957f79f51f
-
SHA256
10760506aaabd89fa0b68c39c644710d675d904e8c044995b2626d42a8ea2b7c
-
SHA512
46162303b513ae138fdc8bfafe787d6e8406894d2c189356531bc9a9fbdc054694598a825b91647ac9db2e13ef52f3f66b5c316e0d8ed80c0ab944a6d98b0699
-
SSDEEP
49152:mjYaXZ32DbH802gveHhIC+4/hqSLaV3SwIWQ2aa2SSOi+iH0K+tFR:IpmRR2SCfLaVAqaaCH01
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10760506aaabd89fa0b68c39c644710d675d904e8c044995b2626d42a8ea2b7c
Files
-
10760506aaabd89fa0b68c39c644710d675d904e8c044995b2626d42a8ea2b7c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE