���طŞϫΟLG����$�$��f�����nXF�\�Z�# ��#��`6,fn.�D�]�|������+/N;NJ��hm����r�����Gh��8�aY"���6��E�OD�٥��9s|����o�{x�)�rj�#Z=|��eݺ邩9Y+��S�'���������ALz57�@P&Ҹs0�%0�I��i��HԼ�p��z5�Z����Ϋ�"�:��/H�*Wؑ�y<EV������?�D���>��P<����vnZ�\��N|F.Y�l-{�>���3:t���� �R?����G/��v]��a ū�'9��R�0os�|ʸ���h��i�������75��a�ϰ:����l�Q�O�W_ja#Y��2�r'\4�U�?�J��=����Т���A��~����U���p=L�NL����f��ج�]*xB��.1���>�M�o�� �O�o��ٽbW� 2��^����Iӹ���n�V�:���������*:�:9���4o�KY���7�G+z��c+����S����ݲB�V�R��My3�> xI�q� �D�LL� 5H�������ĉJ՟�W֚��B,^-��gmtg��U���ue ��,]�1UN�4~�������.V:�0l%Z�I�f�w�O�'��]O�R�� �C�뷦�.��>��t�'&���6RM�6)%����>Gn#'~��� �1©��M���;:`�����C����0����cw����b�^Lߥ�`� F��sF$�0�.�+�FIl�W=��^Sr9�n�\�wY���ҲƬ��j��ǭ�3��D�7��X�/��ni�i��J����`�a�eYAn�xh�����$h�J��d� �:��� �&9�Y�<3s�T�����f�Щ�ҺUu`{|�3m,��#�Ç�M8"B!���b:�z��v�Q"-@��,��U���t\����+R�rު>t�|hJ�F'3mq�&=���7�ݖ� �̈́&,�y����y��� ��ig�+�È���&x�0�FM8W�����I���Ɣ��F��B��v)��{शjj�Ѱ�N�c�w�ۆAʠ_z|U���H��^��t��l#9�R>� u�N=���T�?�����\���U��Ί��܇��w�<���&��d���Va�^�i5O�A�<Suw��ܪ��z�H+8�����٬q~*SwP���L�?�PK�dnT����X� �� ;P�Ҕ3D��@R֘���C��i+� �@ I��潅^:祍oaN�0y��5�%�+����L�+ ��h�&��z�GRX�SR�WgQ/�=V���:��3Y���Ŋ�j�[�ƤQ��E��]PD}J �Z�i����}&"��=����d`_{�qJa��GyLɇ����y��x(�'�����h������V��)|x}�x�'̷��M����c�:�Ǭ@ψ��?:監�w2d�Ϧ�||]�b�PK9�#�pb]���|M� ����I�l�ɪH����9X���>e���K�j�Jؑ 8�s+l� �I��1�x���q���c��J�w��|<��IJQ��eI5n���bʐ &��L|k�~����=a�e�|��U�ZqK�@������|�S$q�^l�t��z�@ |���I�h[�$��_�l�)}2�)��=GnKK��yu�]2f�>��X����R�ߩl�dž�;�t�J &�O���Z7D!1<�r@��A��'Fk�U|�'C{�Z9 y���H������Ed���&��Ŝ ]xt�IzVm�*���v%A�e��']����oߪ���C�w�ӂ���R�W��NM���� ��7Юsw��+yc�XB9]��"��Iԑ�� ߷���6ʢʹL�z)X�W=B 3@@�NJ�jX#��z U'`��矷�Ge� 9!s4�Qf:��kf�.�xz���o��Z�U$7%+��Y�'�G["^�'�+�� ޯ����hz�>:�#c�������u�=&�}ʗ�+�j1�6b�0[�q�mtH�K � _�u������<�li٤���`Y���4�Ěg��TO���Kd��!g(��E;:u�?9H��B�·���G�B�����iKK��0 1��?E�c� A���#÷M�ވ���KQ-�B�岴�M���P�R�P�/����e?"\c�|)tUx[=��E{��=��+C 3zӦ��iBz�)$,�1u�P� ~��L XA��fVT_��Wd`�8��3�#:�䃅�J$8?�LWaV�Ge,�1�]�s�g1��=��B�Ռ�Ҽ柂��_q�E�7:y����1*]ߺ�߱��������4���0$�P��Xt5�x{ٺ���1l��Q4N"�)�Aĥ��[��"|Z��0ɵ@�Ɖ��r��U���'�C�t��ϙ�����+'����`[:j�����5Q 6�"�s4;�D���).F��A���!�/�I��}̦����Wo�c~���|:J`�,U�X��� 8O�1U?� � Y\���k�Ƈ�U��గ�z-Z���t�C� a���d)���$?�"k��+��~07[�&�� �TBŋ�M���Ʉ���Љ��٫������3d�bh���#a����+�o���l�l��qc0�F�3�33�"���O�y�K� �T���C��OF�ٓlW�����<�;�$"]Ȕ�&�����)�����G��8q->+,�J���̋p�mc��E_-��l���RA�<�+W���A-��~n�)y���^Hp%I��@kiF �͜�ʆ(�(��RYs�<.o= �4S��ȡkA#��,�s�u�EkVjkh����01�����B�̚���UaRvau�b���b%������ɑ0�� ����S�����#�����IO�ބ��2�kC+\wJĹY�cMZ�� {�y�*�6E�P�Ʒeɼ8c��HK�Tf<H�*]�: ��[��%�9"�MU���W��ǞH�9� �a'��ջ�*��at�y�1���H���Q0>�]�*[|�7����7,PX�o�w��� ,"о5ϡk�k���o��K-�%S��b[��rvϒ�K�4U'կ'u�C_{E��V«��xB6I��;���&W1Dگg�#zm�H�'Y�:� ������=]Q�j��<��fY��Һ����NS>p�d��.Y�� ��N�V�@@f�t�a���j��������*�0d�N1���xG�M������yِE�%Q�Z״�W��1���Y�����(LA�Y�JL���l�>n�J�RdP�<B:*�ؘ�!O�\���=�"د���q=�d8��6�2�Ѥ3�$W.�4�[x�������Pc��md�J7����([�!�ԉ�t����5�ܥ_��Vή궩��j�h�f�|�������L�՛H�M,��_��%��)��lXY�4�\�MUw�=�@nj`���}T
Static task
static1
Behavioral task
behavioral1
Sample
00d0509147dc89913b1759d5b8d9c688437f1834b4782d97c58aa5db2291f62c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
00d0509147dc89913b1759d5b8d9c688437f1834b4782d97c58aa5db2291f62c.exe
Resource
win10-20240611-en
General
-
Target
00d0509147dc89913b1759d5b8d9c688437f1834b4782d97c58aa5db2291f62c
-
Size
3.1MB
-
MD5
8771a2130409b0d86c4e2ea7a0462228
-
SHA1
f28ebb845d8c653a9df9a78100139823479226d1
-
SHA256
00d0509147dc89913b1759d5b8d9c688437f1834b4782d97c58aa5db2291f62c
-
SHA512
9b8bfc86241516c97154b9fdc8338a970e7866aa75eee9aeefd19650a6c117e5c5d0a2b42c98124f893a2740115b1f21433dc9fd43a8b537ada8393965d768f9
-
SSDEEP
49152:ZleAPo1AviD3IUBDUEkN4ZKHEIM9EgUa/88BXMaMrR65M5y7Hu1H26:Z8Ao7D46JKEtEgV/TBUc5M5y7Hug6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d0509147dc89913b1759d5b8d9c688437f1834b4782d97c58aa5db2291f62c
Files
-
00d0509147dc89913b1759d5b8d9c688437f1834b4782d97c58aa5db2291f62c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE