��l/KK8$'ú�/�#0����I�����x��lYJ:���=@�o?�o�@�V��|�Ho��S���Yu#��[�M�0�Y�d����H���@���BCwj�k&���������i��;�@9���iR��zof6��I����5*ׄ]u.���e�B�*��"r��1 ��e����]#z�= �4ĆպOQ�qy��ʭH�W���3������%/��}���ªP�Z�R�h)���9�2R�,�|Y������^�@��|�� $C�ݳ���FJ;,��������}��&K������M��qG'��>�O��ȐWr}�c�q^���.�'�\�T�?��,���ۚ���v��l�p7�XGrlm��_,(�RLg]�Ҿ�B?Q "���r���<(7 <�TI�^/�Jrq��h����;A��� ʪG����=���x0U��,������0���݃�i���SDDbQpJע�̛Q�k�19g~ �B��� T��P����� !����%���dS�)�ʋX� X@R�#F��0��~a}����[@d�^�� ՛z�m �ͽ��ȰB'Ckf;H�`�����'kOʚx,'`r3�*W���?��qO�HG������N���{` {��{��WC�����>b������xD=:^�Wh��v⽿OZ�w��7$��dضR���s]�U�T.G)}�{.n>p��8"�:Q^�-G����E��h�s�-�RP���^8�D���� MgÚg �VF�7�1-L~�Ő��ܒ��Y�������@ȽCR�uAȼ�������3m'����Q����74VE6��ڡ_6�� ��=OL�V�B�ǖМ��N��Jݓ%u��v���{���=�k��Z���M�˻�T0�juz�D.�p��|����:~�6��fR(� i��5��� ��eb7��D���Ͳ*_�":����@"�e�7����2���hq����'E�Ab_��ܧei���05P�ʿ�#j�|�r�鿤�#����a_�!�Y_v!I��lb8�c>K��@F�E��p)ǫ��d?��d�/r!��W5�!7����0��{D�>t�9��R/�Y�� ����>+��^�b=�82W��-T=`�b5��/[��t���Hn�oU86�^ ���M�Z�� z,��-�O�D.,⁒ؔb%A2���S�J, �4-�Y"7��jac =������X+�<@��?B�-�,G�P�l��>Vu��њx<]8�� 4���S.n�� ��\iA��z��6�ۡ ��AJY.�1(7���k?�SY�vNP��@�+����rN�kq���2Չ\}uS���#�%�_X����{��'Ӭ���5�Zv���`U �BڸP���v�����V�)���ԄiE��%2��[:q��D,t"B(D��5�K���o��˃�_8#�r�j[j ũ��7(�{4��Z���L*�%a'KOt+�EȓN���xi��6]���}����^^G��3�f���.�W�os��{���F���F����0O>QI���$cu�w!7<.�,���8��Si2��$ tg�&nĘB�8�^�N��#�R���"x��-5��"���I����-A� mD�����aR���Ɗ����Sι.���름,���ۛ�R���Ѕ��-��Y�=̿f)���i�6�˞[V!5���;��,o��LȾ�������f>xDeD ]z����=��P,�e�ЙU���؋�_�m�M~+�P�Gɳ�cR��Pd�<U#�oq��� ���H���IΪ���u�����d�F�qr�pȨʱ�#�������͡p f)?E9�o5Ӂ�w��3A�eY�S�%P2��k)�^�����Nc�]� MЭ�dd�X���gv��l�I����B��b������ p�LX=�mDU�*��V�ۅ�e�|���RD�J&F�-i�g��K��#�ۖT�F�`���1���k��I�#�Neƽ�~����0 �H>&��p������ݾ�i�C\�lK���Av�ǃrK�UP�L������#�?.��o��1��6mpߤ�\8!'���*. Y�¼�����z�)��,�K�f8{_���,ʅ�YY,:J�͢ц?O�[��S��>]K[�zE��>x�*&�O��QUr��([;M�-I����`^���sX�"��N���v�c( ����u��2wzٛ����-Ji[.�i~���Sz��g 1�qH�[off�� �|���EӚ�O�9���뵰�.�ȭ�p<�T��+c�{F��{��6���æ��~s��z���j����/�#��>�%�VDwF� ɥa/���1s��Q����'-X�N�RK1�y�,����_/a�M�u�h#��:x"��E�3e��G�[�GUn-y�XM�Z7��_|�x�K�ڒ���%Ĺ�8� �G}�D����Yp�$a�ׁ��Bnn�~����b����O���O�eZ�a�e;��Y�;�S�{z��Q��m>�b��n�Z%��K�@u�5�����K��]^�qR�EQ���C����v�=��}xa ˁ_7Af��&_���YR$�H��hD̜6nL�TX�tCw��z��N���a�>�w����vͮLoB��d��֢QD;��l����ФR��kG��������+7�"}��>�K��g���K'��W��ZR`��t�{�m�|�1�f�#ф1O��Vi�1'['W��lh��4��0���S�+���rʧm���1M��t�;�K����ye��_�LK�a���5����B�@O����5>vZ�f��*����fu��_6�/X:���^j�,1�s�V�s0|[][�l�X1�?k��ȗ��)��J(�����l�1���SMep����a�r��>M�\�"+ �����+jwɦ��W�~���B�V�5d�dž�QN���)�=��䜟��DZ螘��!@-S{g�LMz�鯸���w��˖g�6���?���2���0˶�0��)B�O��.d�t��i! �W�Cl��T.I^F{�n�/� x:�&��[�)M��s���CpH�3���e��I�@�l�|�UDv��������A��� �aݱ�M�X����P{�C-˹n���#1#~�y(�yi�,�������������P{uGq�ֱ՜�d���Ҕ�IN�J�]���b��כ����}ۈ�Tt8��[�X`Z�Ч���Zg�5�3��������+S+����;D~�;!�@eJ���<��J�n�Vr#���z!���� �-���co�)�'A�V���9pe�:�w��-�[Gף����h�Ķ���Ŝ�F{`����Պ|u>c�DZS4��Ap#̒0J�� �:�}�>㯟M�=W��րk�SF���7\6t˙,��4�� nO�����btl�I8rJS�G,HkD��mLx�c�V�˗>1u�Ny��9�q^��î.�j�K�E�+��i9Vڈ��^� ����x���<����;R���4�S���9�\+d�t��u������Zv@I�m�yƸMس>'����w��G��1z'�D�G�g�cت������S� C����ԗ��-��`+ui!������aM,W
Static task
static1
Behavioral task
behavioral1
Sample
0f4432aa6d9085ba34fcabaad5cfd4c6e8dace2548a67edc9e0592387d1105e3.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
0f4432aa6d9085ba34fcabaad5cfd4c6e8dace2548a67edc9e0592387d1105e3.exe
Resource
win11-20240802-en
General
-
Target
0f4432aa6d9085ba34fcabaad5cfd4c6e8dace2548a67edc9e0592387d1105e3
-
Size
3.1MB
-
MD5
1a8555bc65e37a883809f282d770a1f6
-
SHA1
73367da0a3310f0825dcbba128a5b5c1b5416a38
-
SHA256
0f4432aa6d9085ba34fcabaad5cfd4c6e8dace2548a67edc9e0592387d1105e3
-
SHA512
2c6aeaadd2600c18ac9728328161335a573ecfdb27b63663245da9c0ce10fd563d699ac41daa52f2fd2c1e3b61e4e3fd70e8ca3a4b559851ec2c5cf0570d2df1
-
SSDEEP
49152:Jm+JUPlrafbumMD9V8Jfp4Q9np4b4WEsZGKMk7QOK7hQQqHeqopxHd7F8:Q+4l+fbKV6l9np4bHlIME2Qeopx97i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f4432aa6d9085ba34fcabaad5cfd4c6e8dace2548a67edc9e0592387d1105e3
Files
-
0f4432aa6d9085ba34fcabaad5cfd4c6e8dace2548a67edc9e0592387d1105e3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE