�4�˻WA�p�V}?�&�kbE��-�ɀ��/\�c< N4J����kg��"��cpLF6<��U��AǦ��߫=q�(Io*|�7 �b��G�[���� � �Kg�����_�!nZ� ���E6:�r��:��T&�r8JM��]v@��-B >W�[�>OF�7}B�>�:�M�@i����着�˘-,q̟`�#�=�V��&��¨��>B�B��\��I�����Y �{/ffOs�.!�mk>���@P�.$��iOV��㡋�v��4H�~<���� ��r���@��Я��ʉVߋ��IU�Xl�����{�=�3;%ۦS%��b��:�;������E�s����o���<�R���1�%��{s��Q�A\ ��3E=�˒W���u���=�)�@`\������)��C�Q��������جR%�BӨD�� �7�6�eN�h�AN|a��?��p�v�M]iaΛ�Y �-�[�]N�Q���s��CcDp�K �FأH �c]�0Nڝ�MX}q��$��l7u�v&@X石I- .]v=q{�!ʐ#mb���Z"�\���q��#l��E�J 䍉̓ga�A���۬�sH�%�ܹ�){�����~�W@Μ�Rb;�pqm�� ��"V�r�ja��Ĉ������?�"��ɥ��w�b�j���V^*>�Ϣ�����b��NԳ����ゖA�[�(�j¬�e?���{.A���:-��r�9�5|��*�@2�<�I<��{���f�hv����Bާ^ҕC�����[���r�����V�� �ׂ��3U�[��$o����o�����ӻ�)����#^�9���������6�_�y�t���NZ{<WBH�4P��(��C��2�!���V,��e�@}�[���k�s�P�]�QS��w!]"��W�ZKK2DCťoH�/��bj��%�I�����&�6'��¦�9Նh��e2_��bl����E���\D��� �T�`���s ¡���%���>���=�G˹{a���cJ�~����f ��):�� �vz~�o�Q��K4 ����f�>��ۡs�U�a���ȃ� �x���C<�5���gi�A�<~^^\宆��rts�0|��� �Yl�:䨓�$P�t�k���`=�f~S/�2m�ƹ:j�{�-��� V+���i��@l߅J����]���v���O�tc�)��2�/��lC�c��?��}�n�����1��ĊE��q�c�g���g��A�o�s��������~�9�=8t�]#+O�y��/�n!axm.4S�ޠvo�ߩ|��f("��v�n���4�yDd�ҕ���t����� �"�A���S"�v��u�3G-40��-#F�:��|�B��.���]��ug ���m�x~z�1핥=xl�ïǧ����m��8��辂%��P�����JWQ>mx��$&幎�D2�N2]t����|+�:�������|t������#ڨ�XI�輨�j�%��&���_{4{a�8+\�l�57N��2'5�q�����LG{Z�b%�����t��U���~Gø��x�o�7y�%l:Sg2��� ����~�� ��V*�K&�B �n�@V��o���� ECl>G���d���C�; �X��Jpe+�����j���M�W����ʹ#��I᫄�'?7ؗ�]��U����qvb��x��gDS�iZ�cy� �QC�Z��i�$�g�1E��uD�к����2�U��`��No������~X�S��mR^E4�%�z����?�롛*�=^a�^��p@��x����,�i<���w��#�i���eiIҁ#�nt�Я�KL>Y1< H�9����~���X�k�{ӆ����>b�'���y�Jx!�1�y6�[�C[��v(�<,.�x^H��:������ P$Ũ`�^�:�{s �p�XH&N2ޖDmĹ�FΙVA�Y+c�Bտ O}y;uX�J��`v6w���J XZ�"�S~���w���uk��D7�U��]�zha����.��J��6zA�f�G��@`H�����t�P��I;�B̓ȩg���} ���gTX]E�N]|�b�\Ū{dǽ��~��Ps`�=2c�f%ͩ���_��wK>z� #k�D��A6�$M����~U�(�mG�- qXc���7�M�^����-&l^�\� ]��|�f�T���H�({ȶ����,�� ^>��-˘�������6ԉ}�c���W'� ��X[R����ʀT)&Lt?8p�R-M���o�>ů��*�7�c�~����m֪��i�t�~�W)�#�}�m,�-�o�ʞ܇s��z��N望ł�tN�l>�} )?l�H1?$���q�E�4���α�G�/{B��KZ�x�>���&�� q��'��T^�#*� �a(z��S17�1��-%L�ܥQa�� �o�e��&�t�ԟT����X� id���9��z;���_.8WD�2`���0姘s��VS4 m��#���I��.�n�p|���g�x�K�_�����u����$�r�p�.��w�2��$�^���M�,.��C�:�|w'ʲ�I��O˞�Nu���Α5;���h�����/��#�J�E��o��CD��۬��Xf��9G�<��6��he����K�t[�njj�;�&+?�9`PX�V?�@���qq��F~b߲IX^�p��E��J�����jD�&���{�������9�n'� ������a���R��y ��%��LD�$� =��(>�?I��w�S<���^����a~H��{��B ;;�O�!��mT�8��`���X�ҽ�%�� )R^c��e0�����|����n�V�"h�� q�U�}��K�L�i�s��8�6,��IZp�����/@���Y��Q=� ��� �A�܈Y��ǯ�5cF9J�$�����B��xF�s�^w5#�D���"�3���3�R+�+�Mx9� ��t�b�B9�n*�M��)�%&`�|��z\@�}7އ~\�'%��ԴxA4�a0�5�����6�P[a�L�!�UC=����M(���-�C+���H�����$�3����zn B��~kR/�!Fɋ���ρڟ���V�nt��dI��?��vw�P�Q]�=4($HTB�����g�Nj-���G�<�/�z�����$����
Static task
static1
Behavioral task
behavioral1
Sample
55e775c717eb8360aacd9f6985f50d49159362fa32600cc3cc204462bb464504.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
55e775c717eb8360aacd9f6985f50d49159362fa32600cc3cc204462bb464504.exe
Resource
win11-20240802-en
General
-
Target
55e775c717eb8360aacd9f6985f50d49159362fa32600cc3cc204462bb464504
-
Size
3.1MB
-
MD5
238fdbd7023be1504decb5e1faa4e47c
-
SHA1
a8fa01acdf1f707a67da2d11bacc8f826e5edc47
-
SHA256
55e775c717eb8360aacd9f6985f50d49159362fa32600cc3cc204462bb464504
-
SHA512
96f74b830737b3df74db4a912bdf3345484012a2a74017ed3b273a0352156fb9d1b856d5489af68e80bd8ebb73b5e10c1655d348114b100a09ece2c5cafcec58
-
SSDEEP
49152:I+649zXss7UgfhB9wxQ+gXCIXSCPiVNDDSmfxc0x8Lay3uyi073xT:bzz8i5+xBUXpKVbfxc46x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55e775c717eb8360aacd9f6985f50d49159362fa32600cc3cc204462bb464504
Files
-
55e775c717eb8360aacd9f6985f50d49159362fa32600cc3cc204462bb464504.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE