��YV`>��P�Awu�6� ��K���H���PXl,�(��ҭ�����f��5��|{��5��@�vf�ɧ�ԕ]$����k��R�X8z��r�|*z`��P�� .�F��N�����k�\�dժ/�@���3�K>G�ww���¢}tl�p��(]��T,az�߄����e�D-�����>b3��"}�J>��Ԑ)$E+! �g�Y��A��jF���̺�ϧ�Hj*5�'���N���w qJD����]���n\l�Z.O�8�����&K��=~s��1��&������b�L��ܙѪ���S� ,��������o�3��%���8��ak0���}��n.�D%7X���g��=B�x��=�7�F2>A����%! ���IB��|7���#;'*|��/�o��+��i �a��{�p�I�(�^(�\6{�^H{��3U����V{a�G�qL&IBOn��8�z}!��0�V2xk�ȭ���?0\���n�(~��O=�LK���_RK�� ��{E�(�(�i���C�M��G�Q���z�E~)�f�@1ķ�18 i��g��)!l2�5�ڷ\�u>��x��s�&[�J�U�V㿇�߄|�����\K��M�6�}�n�-�NK]��dr���b*�s\��j�E�<�:O��p5:�w2�p�agDn)���8ڪR��u�T�5������Ic�� T4��J�S�:+�#̿�8�Y���b"g��h���9{�E2�N��H���&����v����I��ű}�#��?��(�=ܡ�;$/%����Qה��~N�FÖ���lxn��|���m|�ƒ)(��!ß��m�j����s�������Y�=�cV4��{�*0��ܴ[]i��`�-:��V#��Y��66�d��Yۨ���wcyz $`2��m@'";�.��C����!a1���uO����b�P{����-r���E,ns��,Ɩ,.15%�)��.&�K�@wD �onu+�.����z����2���~��nR;XIߙTD��pb������)���5��K������%a���^�H�,y��c�Ҟ�\$�q�����z��ڭ��{���ܕ������H�6K�l�%9�Nz,=!ibP�����������9�� Ȯ�H���;�K���,�R� j9�,��������y.3n}��)v��������1���l�j�ÁI����,!����&��T��g��-RE4ܧ5���9�� ��ߤ2�zW��M=E��ʳmR���N�"�X���r����`I�ef�{�l=i>�>�+�����h������+�g�,�q������¼h�(���{ۿP=A��m�������Mە��+7�.�^�TC�^�����]C��k@��g{Jv��������p/]z�Y�8��j��'z�2��FGO ���|�U<���6�Q��Q%��G�W �ѵ�J+D�v*��:�c(�BF����n�yD�����:�p�?;�����/���g�mrv�$Y��� h�pL[0HP2s�Ő w��[[�4u�����[W)i��M9����] ^Z��.=|�=�yRn�%�w����v4Ϳ�V��9=���ߋ*�9~e� ���ۻ^�'q�}_GAl#�LCY�s�J�Pdܪ��j����Cړ��j��q���Gg�68@�Q� ݠ��&�����M8�Z7��Y��-��7�~��:gEh�6�:Z�X8N����BP&���.ɯ� ��!���g��v,���1����D4�s��ϗ�N�tkaM��8�܀����g,���(s������4���$Wz�O'�_�p4 �������+M�&�R���s��D�L��5t������nr��$��D��0z�x�¼�w�M"��˵v@�ZWr�0~� �{��ڧ^�?֞ŊV����巶�{�|�כ=��`b�b�^�zch��QL�{J��K��dS�q��LD��m9 !���nq���<D�1<��ܛ�n�~��| ߷��y�c#��I�6�cDtdC��OM�TZ�e�s�U$E��W�I��x7N�gC�3g4اKhD�l�ȽMz�'�����KV���g��y������a��g+s� p(1�"�;��oĶ�b�Z�k����%,�/|�h������F6��q �����zO � �x�鑧�ʌ���D����9`��_��Kg���ٕ����=M�CQفg��֮��f����(���Z9/ÁKC����Koˬ�j!�y6?��>�� ����h�!��Q=)mM+%~������R�NK�a'Թ0k���W��q�#�\M��_��uPlUa`����h ���"��~(&��hU-{����'��:��e�E��ɧU��Z� �p�#�0�`ֻx����O��<�ۑ�T���IP�H��%�#p3D��xE!��9Op\�:�zu%��?s?Q�rG�N������w�Y��89�\K�@K�q�{5!����zI !��H�>|ņ��|�i��yw�9���Y�#������d��v�II�����1��~N��D��_j�?0p���7�}��0��wa}�Dy�N�=,����B-Y���j���Z������:ՁQ��m' ����g����v֜!�ēm��[�}�O�O��l��hPF¶���~?^/����$�}bmǦ�� @��'�0�T����l����z2�o�\VXn4���fAT;6���_��^�y���!�����b�������A|.I�rh_y���g0�/�6)����o��g�"*s�mz���}%F���B��r3�T d��x�V�!���ٽ��-�c4&l;U�� ���I�B�@&t���:9}<fl�s���ze�{� >�L>�\�Vlg�⏊���$�����}����uY�ba�I*�=v��,Ł�%wQ����z[ �q $G�i$[i���G�ݕ�Tr��>��v�!�+qh�+GM d)�n�4,*�)&i$H�X��M%6�u�,����ji�V-u�\ƣ髣���)XJH�7���v�C���,�f:j�j,���&G$Њ�%�0�'6���Q _s>Һ�|-v�F%
Static task
static1
Behavioral task
behavioral1
Sample
729940b311e382dadfa2bba76d4fb914ba35c101e7884c258e43604e824017fc.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
729940b311e382dadfa2bba76d4fb914ba35c101e7884c258e43604e824017fc.exe
Resource
win11-20240802-en
General
-
Target
729940b311e382dadfa2bba76d4fb914ba35c101e7884c258e43604e824017fc
-
Size
3.1MB
-
MD5
7218a0b25edb520f3f790b8a1aac862c
-
SHA1
121ac7fe675b9592806f97ba61234846fe547e13
-
SHA256
729940b311e382dadfa2bba76d4fb914ba35c101e7884c258e43604e824017fc
-
SHA512
4866374b3145b9529b48ce305ad07d0aacd9fd5ecc5010c2f8bbd3d74cb5c33e2a9fdfa1a9b5b48540055d0574bf4f5b9439fb6fcad41cbb529fcb530a231235
-
SSDEEP
98304:qrH4YroSIdwHiRiRkGA7c3QZKHiGkMQ/PNU:qrVoSGaiu9I+PpQd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 729940b311e382dadfa2bba76d4fb914ba35c101e7884c258e43604e824017fc
Files
-
729940b311e382dadfa2bba76d4fb914ba35c101e7884c258e43604e824017fc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE