�#38�W�2\6oay����n��`"���+G�-�G=�j䵏�����т-�����^ܳ�Q��^p��b!���.��]�"�Y���_֊IA,gx.�ۃ�ux͉~JT��c�;�����"Ú��/;�5Y�8��K!��M��_'\�D��G���S���������C��J�0��P��8j�v;'Y��K.�u2Y'wׇy]��8Ĩ�v���P�jv��ets��`�E:6�����3�fn�Q�� ��.��$�����t��=�b��P�6/T��o�{�c���i� �4)����UG��y�5h��ǐV�7~�Zrφ{' K�T�d�Z�ڒC�kr������ɤ�p~��㢆0�dd�bI0m�6�ui<��N���3\���I�I�4y�qZ�ɬ��ih�C��7��z�qsIz[kǩ��)|��=z0��Vr���b���0�Vȫ4���a+,�rY�1�����A��|m��v���>������h�!�D:@���B�ƹ����ܗ���(t |P�AlC�VZe��\�iF͵�$��$��@r�_o�2�78;�H�S���(�����\A���K9(�S=K�B��ꊃ�l�i+ � ����p���ӄ��� R_��a���.r��Mk\�!_;o`�,�P�3 S- ��Ǫl"���!�,p�j�b���]�Ŧ�y��Tw-D�u5���ש�!0_A�^m��w�Tum3�~|���#?���˒ȧc�"�����L��L����������Ν��''�8U{m�n����z�ssۣ,�z�:Z���D��V�$�����)���[ O�zr�~��Mo����i�њ���k슏>*��sJY��~�d���q)Ao%�~��yA�C�����)BYi�YpB��뻎oF_�qu)��z?n[��W��ci�@�F'�S9�L�����`�6q��� -Mr�j� �@�_ ���v�=/>���}to�U�3�*��-&�V�#�ڴ���\]L�%xX2� �|y=������G÷x_���]Ș�_D�C�pg�����q��\-l\C�7��8�A�����v~��|��V`��Ξ"�ǭ7�u6Sڏ��l�g2�r'C7�+�A�B�,�,+�~�+�1�:�Ŭ��F�v��Aa4I�D��<[��r�b�b�rJ��ݬ�ܬ�]��5��eM�r�-���k't���0�=�(BQ��4� ���j�OˊoC�pyc*��Cd����}�S�>��K ��e�r?v�4�F���y�v(�?�©�*���i��nE�Y�������q�����!tQm9{�/��W��W��5�����_|�n�.��-��v���x����rh�a�N7�I��;(��ꖦXN\xm�J,��o�~�U^���%�-�_/�@�4�m?�!y��" "�2��z���a�AI��k��5��ms�Df6��%��6snSE�����(��<5����l��"�A��� �,נ� ��/2���-�g{�g���zȝ3�N�T!��[�9�Sݖ�`�2� 鄷}��^�(��-�Q�y�{<i-&�G�9��U�7� w���h,��p�0�{� `\�����HV�� k����c�8�!r�0����s]f�,�[�j������T�Q������+/R�����+8��[�=�D`o�u$�|g�b����� �?�CU�d1(ݴ�y"�?��վcH�����������l��xNx��\u�i��u����c�vIcy`v%̘̑A�!���e�_����0�+�K0�S��ht��!}p�q�Wo��2��K����d!���T�`u��8(fHD�}�%>�΅w���n=)���c�>'�T}��P5�ַ�*��� �&����/��۱��������?Q��~�q~���`��͵���+�I����4$h�l��j�:�|`d�#z�;������r77�<�� �c�Ԝ�T[�V��A�Y'0�7�J�{�����L&E`�%'@��~�fGZ�:J����!���oA;K�0�` K̾���B���CCWt����<��r�� ��|��ц��T��p�Ez�s#����� 8�'k���̆���e�i(�h���>��h�yq9�+g(��C��l&��1��\�w�n�����cz��2pׁt�����T������/��8D�QAsL��H ߣB�y�Y�*ɐ��(����r��_���6��������8�y�`?R�l����:8��0Ŋ�̞j����}������B\���B�d'�+�=�4ǦC��j�j:��_��aї5�����M�{�v��h̡��ߞ�pw�C����g@i�pȻGk�3����N��.z�M֘�y�A����$ D�2�p���ņ���0q1~�jo�̱HFA���-d���u,_��� C�C�'��1����Κ��>�%k1��q��V`��P��G��Vs/�WRM�3!�r�3!�(�5;@""þg���4=|(��U0ULՅۻ�U$������W�̆�X����Z\��r'�<Z����M�p35Nٴ;x��7���4������V`Bڋ�h�lЈ�4u>���^ҁ�z;~�%��@?�҉���P!���{��/�0�w}�ZF� \�p�.��şGX�9�z�l�;-2��3�%�N1�$HJr��|�2�dR��5�������@�w24)��h�����z�����1š�z{��E�*%���Q�R�☗bm��u�T%�k��&6��T��jр������+�>pdD؟�I�!���>3����Zj�_ƙ<N���^%89�:��meEs႞+�8��6tdl�.�F)�+�[*(i�� %6�)������A�X6��>�ad�ȋ�g"�j��.��v��4�$���͔�A��H�qt�p���m��F��nk%��-y�2K�옸�vv�Q�a�2|B[*�UU:�;f�� ������H{��+��|�#���IIN���3���+z�<�0Y$!��uOz�/s���"u �0B��Dn3�I0�ʜ�\�m�D髬%��Ax��A�S�A��C}��Ҹy�'�ҫ����q$�n�p�Vû\L��~��җ���P#
Static task
static1
Behavioral task
behavioral1
Sample
2832122ae9b71661eb268de74981b407ce4a83336f99c62b832f700f736b13d6.exe
Resource
win10v2004-20240802-en
General
-
Target
2832122ae9b71661eb268de74981b407ce4a83336f99c62b832f700f736b13d6
-
Size
2.5MB
-
MD5
acd832d0a50052d71100328b6ec27446
-
SHA1
d9cd148a3dd8c63926081e49f9d36f16981217d5
-
SHA256
2832122ae9b71661eb268de74981b407ce4a83336f99c62b832f700f736b13d6
-
SHA512
3487308395bc5c4f6d59d9c2479916c2b51dbacc04cc6adbcd214fd41da02f3facb4496fba17c0eae8e63a27327b720e5a767fd4d8f6d6b61ede1abcd8866d12
-
SSDEEP
49152:yyqj7/uI6giK+Q/xbNyDOvKIEnf4puG0U8Oko3:Lqj7/Vc7Ovqku5POko3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2832122ae9b71661eb268de74981b407ce4a83336f99c62b832f700f736b13d6
Files
-
2832122ae9b71661eb268de74981b407ce4a83336f99c62b832f700f736b13d6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE