�O�}c�[����-u�����"�&Fh��_�(= ���<{�Ne4H�W�y5 qִ��<���ảu�5��|�,A1h@�d���8��E�sQ�<Y�©�HmSBt�һׂ�$�p\Щ��6��χ�h�I;�����+{�����<A�Ś|��3?�����m:L_�3`�=���Xvfrٽ �dBV��xP�sܫ-�!O -o {�z���9C�xq��#O��1�kKiI@XX��ލ������b9��)�t���ֈ}:�)w�˝� ��N#\됏��KW��܍��A��3Y���l���P�͢��dV�Wa� ά*��m�����p�; �m�$Z��H �g�hx��3�B�"���F�Hÿ�;�S�X+�"Q�+�p��e�4$�L)F1��혱xR�<v�]�R!�g$f�I�B�l�=F����k��B��`-�侃 +��ˣ��`�Ю�+�H��i`�?#�Zh�=�9�%��p���<57噌?9�h�V_y�C>��AS�\(�y�G����9S<��G�dې�1�(�U��t ��[2��E�s��'���լ�"�K��"��_*+���Q��{p�(_W-~�<(qv|[ˡ�f�:;�;�ا� ዊ�y|u�)V� 8��W��.�sa��B�=& M�\5�?(��MlK�I�� ڐB16���T���T���x�������}���C.z��e��h!iɼg]X�K�m���=��[�"m�W�����C0�����ж�`�������-$�bm:���<R�>d�+}���ޣq}�\�j�]"n�+�J�JR� �OfJ�=�s�8:-�ԚE:e�Edo��Q�% y�د��K��1�d���W9;Dn���X�������d���J���������g�c0�$��x�E�(9�x�8xGNu��L6�Ӑ��� !�n$`�`.ΐ��+�a��OC?3��@-XRV�|��)jq��rS�<��C83}�C+�1�S�^FĿ�#_n����C�-����U����X����6w�n)�z-F�B�S�nn�j�u�*�WF�XE?ן4��K����Ud8�B g�_�yF ���� P�qw{ͦ���E-m��L y���PGM'�#��>`k9����8��B�_���%�St��Ֆ�'���kгlpn����u�2n���ƕ_��1�l7����@��0��.A��33��M�21��R����}��0(T;_DX5B��9�N�{��3!���OX�7�c�pй��c� T����2��q����M����o���αj������4�8���]��r'8���l�i�fN��=��o�����M���DjO:��.߀g�����*.���ߠ�����S0�4�{遺�r�ĭ<4l؇�m��h~��f#�t@�&.�����l#O�2/�NS�x� � y`]<�'b͡w���.& 0;ۊ��#������;��#�3���۰���Ld%~X;�|=�Q�~��K��D��N�P�4�_�?���=ǘB��b����)�#%��D!��`A)K; Nm�m���eA���؍�؎� ��o!���j�@���e����^XJ�k��$uwS��25��$ +�C�YZ�"� �)0q>=�w����KP?�gE���ԕ�����{N��X��tA�������N�7����-:����Č����r�M� :���j3����G�!�|r'�Kg ���%j�h �u7�]�=�]��4���~��\��+�����F� l�Cxi^|[Z��a���6��8f�P;�@2�3����L��m�,���_����;a�~��mD��,,U��� ?��P��<��ʛy��@��,�� ��id��G�h/�K����W�j#�l"��;x�t��z��T�m���L�V���p܌y"�ǖ�ǵ�t��Z� �\�mJU%�ɉ7פ#����� |���[t��SX(u��ͅ�9��^m�K羆�h���!�X��v?�sd��[ՌK9����ɸa�K���3�#Nڠ�ָ���:w�u+5Zڮ���C���y�HN¶�Dz�äU_T��5�$T��`K����D��Mc����I�%���p�!J٩l I�XU�8�eg�l�/�*Rk��UB��/x_��+�1d�vi@y��S٘��T8�QȐ�+�-��e�e���=O�7�95�"g�~3YBٗ_��Č�=�]`� =�BwW.R�i�>�o� �Y.+�%��a��'����L��˖�%f,�[�Gn�ҙ��o�po��� 2�P!���2C`��m���]�ٔ�)-1tP�4�*P����a�]%��l� e�(�d��R��l̤�.tL�����Q�DxX����s������Cj3�e ?�s�eAK�ct�o+Eп��(8��2m�������wt�TF ������<ԃ�&�>��{�P<N0�ߊD�B�3���?a��?y��;�)V����@3���^)�5O�&"�����V:�ȍ��iY95�Q�[��e���ƾ0V1���:\�a�����Lܜ���,6���foli���hY�[�N]<��r���d���Cb\���S�$�o�H�Ւz5Ծw�5p�q��_����.~�`!�M��x��9��Ǜ��!͕�J��t� ��L��n�QO�"��@����^W{� �c~ph��iQ�8���(��Ew7���D\N���� ��nul���qo��б��r����,.qL�J�-e4����H��w��Vo��d~����hˋ�n�!����>*�r�����^���l ̖D�ʒ@5c��-��������Un�'ٗ:r��=j�oB���vb�*~��u��>QP��L������֞��GW���Hwn�<����@�� 0�y[jW3�⑾�H㉱�]��Jyf��u���� 4����{��0��.d:�z�� TIțKM%}�.k>���F��hi���K�c:�<cK�yn˵�����(=7���n�j!FKf}��\6��}M5D*��c���ԯ���p��xg'�f�X�s�(o{��Կ���'��Y85 �����'3gJ�f&��p`�b�Ih�����Q�L���C � ��8&o�ܼZ���;�)L���薲���4&�R������O��>������T��uЕ��QO�[��+p�O�I���)L~��-��/_]�&� ���_���A�E <͉���s��R ���|��B{W����KM6�t��c�%�܋����J����ϐ��=sU���jAN'��6��N\�oDQ�7��&)d�O d�8�3�\Ipd'��-6Wv�؋��0@����*�*�Y%Q5���B�%��0_. ��0�k,I]�9��!��]�h���w9`�xm�C�{�7�Ul�п�Bs<<����$�w��}���]B��4�Ӿng�m�C��M�ad 9s��L#�Hz���K�ki���۳�����^�n�{�N�T���d���VF��<�~J8l2Y.�����;���J���5U�eZB5�q\�5�@������ �ʁ9�A���Y1��&�zWn�齰0�.cz�N����ۙr��,Ac;d'��y
Static task
static1
Behavioral task
behavioral1
Sample
9a0d9cd287dd60d8f4aafdcd7020e0ad897fe721a428049c435c24dbcb29bbfc.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
9a0d9cd287dd60d8f4aafdcd7020e0ad897fe721a428049c435c24dbcb29bbfc.exe
Resource
win11-20240802-en
General
-
Target
9a0d9cd287dd60d8f4aafdcd7020e0ad897fe721a428049c435c24dbcb29bbfc
-
Size
3.1MB
-
MD5
25bcb7ebee3f1cadce066f73f8bf68e6
-
SHA1
0f645fe8aacf8ed50efa28d10fcb1e6f7f9eabd1
-
SHA256
9a0d9cd287dd60d8f4aafdcd7020e0ad897fe721a428049c435c24dbcb29bbfc
-
SHA512
235259094a566e4810aaccbab04c73222c18fa0dc25f6ab72802d69c9cf76b06f142d30eca90e31bee6b1ea778a234fe4782e74542fc2e226eaad9476f86cdc4
-
SSDEEP
98304:hFN6PUBiGUwGyruCqp8WIJ4GMmvwJHmI:LNBUJuuCqlvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a0d9cd287dd60d8f4aafdcd7020e0ad897fe721a428049c435c24dbcb29bbfc
Files
-
9a0d9cd287dd60d8f4aafdcd7020e0ad897fe721a428049c435c24dbcb29bbfc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE