��<��G�{��.Ht���^��G��2��o!��� ߘ[p��VJ��6��յ6}���4z���4�2��9~�"Ȗ��Y��řu�x�s�~,E���� o����f!�w ��Q�JE� �Պ�ʷ��xg����49����2�g��Cb^����\q�[C��Wz�<,q���&��F%X�������`��*fuB#��<|.�`wc���<Oo? pp�Vzɢ���+͢Ma��b������t�|�+��\$C1#�&X��z�n�@���^�������;��`u!<X ��-���:��FD�1o���H̝_�`�6��y1�v��;�]��PcM�����K�Tf�H=�Y複 R�S�bb�-������� �eq�+�d����=x;{���p���(�`7����S� 3\�'���OR`�� ��&� ;b9�����i�sJ�t#������Lm��a�]�+ST�K? k�(��X�o�A�����`q�?sc��4C���b��f[��VN��hZBs����-6��)�@�#{���0����=��4�$�8^�9o��%�%G��y�;\�Ѵ�/�$�zG��C�PR�Fz�F�ж��5��'��kU74��[�yw��^�%���5;s$+h���ۺ{4,�P�`@5rr1ϊ?�릦ht��r*ˤ6-_v��X!���[�0=R�TCy��b9܂�H���)?O�Ϫ�"��4�\K�ϧ�>��Q����+��(}A����B5��H��C#�=��o. D�ޙ�o�Y�tE�����// TD���.bCki�����L��ݠ۱�۬A�͐pĪmZ_����d���3�pNjq��K�o�����%Aj.rO&̡Y`��kA�m�˷�^��via0��q�3�ʆ)\J�;�$��>����m7�|������v> �uq�x�Bu�G�jш��Hs�9�7�;���p�a�LHK�'fl�bb�Ad�&��uQw���&��`!1�Ya@��f�Y5BD������[��U�T���MFE�035c���-s[�/I�KP_��``+ �,��2T�F�}R��Vp�������=Q����N�4�"w�陿���9���⼔FWꔉ���1�yd�H�%?͞-�݁�5��bd��e(�����$��������`s%z���}ȣbSDŽB4A��������fxkn5�Ch��r�C}E`+��B���ޘd�\��g�Ϳ��m D5Pj!�'��v�=~l��F��� �$ ��j�GY�����fG/�c3�e���K�o.�:�4��-�)���{50s��h��Z���&QD�W������o`� a#==I PӚ�H��\��O� � �; �krO$/��.�\�m��z@�T��W��ϸ�2Cq)�~���j����@����3�|�~�%:�<��c�~4�;�6�6q�c/2%`��:�Ǽ�c}~��H 1-g�������3���A,�����/���K���b�L��f�zܭ�.����C$٧�fbX�)�ߢ���.��U�]X���4���ljQ�ڀFz�R�������9\��c��Ȧd��HO�U]EWngL�ah���^�W�U�-�ny1P`���I�Of�2�c�܃\�nC�㼱����V�A+����K��:����� +��\ _�(�R�W���ȡq�Th����7����ֆi����ݜ�j�ĉ�I%Kŗ����ٿ�"<���c4��)7^��?���XNP���H�Dsğ�Lf�Tr,@�h����,*:���;�������^�P��������b.����,�� ����(�\ZYzʋ�y#^B��i)�r�� V]ֻu`03�,���N٢��Oև���Ȩ���3b�+��'��`�;�n0*$�?���.h��0I���VJ����d��f���jV\nr�RW@�t�Ν�{���q�mVؕ�||��NZ8�W���.A��9�P*��t��b!�5���jl��.�_x ァ�� D���a�g�o@x���`��[Eߖzj���\u�`mꄒ�c�����>B� qVͷ)�¾§+�c��5 �x���5��;IDx�$�b(���H���3���*�~Jf��阝&��7�i�%V�W����b���t3y&�jy�:�w�m&0��آ�� aHh�Xt��Aq'8�|/$��ڹ���^��T*tP"l��H����ni8t�z�\�NM�Ɔ�L^�.I����r����i]v뤙W.>#���5B�;*v��G���r�q�u�r~ {���Ʋj���0��|O5�RmZ"�� N�d ��6�I���_)��mֳ�6]ꃞ��T:�_\�E��7��Ԙ��Ќ�)O���%ᴈ��t�����e�x�E9 "�H��n�mӽ:b���D��Cl�?n���qk~u[K���<2�'�1#����86P�8uT��q��A_!M��ZH�M� hw4��Sѳ��`�@K4͍��~ ��o^�~�qA,��$��l��� [s}��J4�MR]�M,� O�l����/z�����҆��m�`�I�bo^�+Qr��V�:�R��J����]�;�j.��F���7���Y2�$!8�Ѫ\D��wHژ��ST�c.�y�Ԫ�����.O�,A��R���f��-eL��Z`́�-} som�}�8)�$"pĊ��8jo]xR0e�D��F����Aԛ�Nz�=l�PRv��V��z�/e�^q,����K��� ��߬��ML&�s��tg�hn吿�n����n��)�&�6�Y�AM���y��X��Vn�@7��K"��&t�kt�����ֿ&�l��|���JK��U��o�b���H}Gn��hM�4�y���n���T"YL0��q|:�"�hzg��:K2+�ifH�^�yO#\g�ډ�~�]�C_L'E%��@=��c��t����Nاs���E�l�Ty<��9^6+��5S�������&�qp��e!���K�����3|��A�n=+j�3�W���R55,�{�CE��P����|9��-6�|����������S���A+�+h�,g�EU"�ӷ�5g����������#f-<�=��e_���BN��;�U�|���Oa����fݡ�FK�>�b�����jA@I+E��;��]���4Qa�=�{ �Ց�w ��XΥF|��_cǗ���X��D���@_ny��� _^a#k8�zT_zap��F%��H���\�\���Sڪ�0�\(s��1f�z�i׀taBbb�ʗ���B�w"DV,���49q�� �(�y+�]�>�lᝒmG%C
Static task
static1
Behavioral task
behavioral1
Sample
2f84115cd2f871a4596fee4f03cc63ce2b793f44fdef6393bae5a7e959ece86f.exe
Resource
win10v2004-20240802-en
General
-
Target
2f84115cd2f871a4596fee4f03cc63ce2b793f44fdef6393bae5a7e959ece86f
-
Size
2.5MB
-
MD5
9934e23eda64df2590c4f9358dfd1fe4
-
SHA1
c2c4044da5e61f1d1f8361436de3581e0118da3d
-
SHA256
2f84115cd2f871a4596fee4f03cc63ce2b793f44fdef6393bae5a7e959ece86f
-
SHA512
147b70cd9989080343e8275fc2b3300e4a7b002f9a23584b3fba25d69044e64f0fe83d7535f7034551f79d091a42ba4c25c09a83016f62743db2020676fabf2e
-
SSDEEP
49152:EPGwZt0jC28NMMDC4eF8f7unoDRqXhNbBvh4jbPoPLZkZL0hK:H+2IMMWnWeltvcqQ4K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f84115cd2f871a4596fee4f03cc63ce2b793f44fdef6393bae5a7e959ece86f
Files
-
2f84115cd2f871a4596fee4f03cc63ce2b793f44fdef6393bae5a7e959ece86f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE