q��b8j�W�m$�������D'�m��f�*�3Χ+2ϡO������i�F7^���k$x�V���m��T_�V��~�p�ԡ�U�[�|�CzZ>�,��n�����u}�no�~&�)(ae�U>�@�y/�4Q72W���J)ڨ��� �#�!���GD�9W+�=3g�P=�[��884k�ꠤ���~�a�o!w��$��Ǫ\c ��:�b��å��L:�Y��ޭ�H�{�:�<���IM���^w �8ܗ�{����N[���:,�>�z ���z���c��K�֨D�݁�~�r��i��@���qg�V��5��� ����jB�U���Q�����p��$�W5+Xs;9%����ih�՜��y�"�G��}Q:���x}�;R(Z��w"�9���.��/������j:i����V��ɨͮx���N�����IZ��������nK�biij�}/ v̶��x�S�ݝe7�����$&�h����mZ_��7B�1~��ڶ8���ۑ��kBl i��#�����Z��5#QW���\�0��`L�a&0,��Mk��� �}�g�=x���ž��R��ٿc�?�YW�Ê71��Rz�L�(�x����Ҭ�%��ߌn�L�������A��f�L��,��Aq����@��7���p�X��C�7�?����!M�,O�L��H������f�V�^�~��,FvB\��|�Wl&q���~���s�3k�lSq*�'�̿[�9��B�%m��+�;��V���2�}���1�T�-E"�����k>� �S�ܭ�zK�t4Ǜᔃ qpa�<|�����R����U�5c�9u��V��c���5^�k���m���-l�-�3K�������Y~>�H�=e7�����_?��Q�y.��w� Q"��a뺘���'i�;���%�����#�ު�D�七��UdJ�FyrQ�Q�쐫Uh ��-gy�{�W��s��<��t,��[�_���,��p �T���p��H,˩����_>�m�{�)�B�������RCՙ��ը�tRÅ����L�5Jx��@�p�4n�Cƙg\"=Y�U�&��+��W��M�%Li�ĭ�p��u����#�Qq���9�vt�l�1�G�Z:-�-�%�U�C��8E�>�h�����(6��O���s2'JJ��\ ��� �7No�C3�<^p�n���� u����#�%���}�/b��l����/�%xѤ7VKP=���m�6��0ݶ��CɌ;�]p9qTcxk���5!��i�ÛE�D�aP��'ờ�jQ�1[�8A�f�A����K�3���9F5�ϷG� ����tY�(Y����K��i<Qw�������4u�j%v���.{3jhB�VT�Lqn�^@�1i��/2�9��<��B�Z�O��] � �ΟYI:k��-\C����v�Y�b�q�"���A���.�8"��Y{d��� ��I{��P�E}�,��X��J����(&�X��11��*�ب�������-�b��e1��i�O!WՕ���K_w`��E?����٭�|R bj ���B'Z{H����+�/�k4�y��M-N�s��D|�\Eaa6�\i�Wh�d���P��[|�ɲ�K>"Y/l���L��jX"wnD�qc t~W~��mjS4��0EyI��^ $����F�wQ[��m ˄ez9��^�R`��O�R��@�̍�R����(�e#�G1��߮y���G=��@�^��>o4'`�v�.��b�y�M,���> 18��Ն���d�{�9���"�غY%�"�����d�� z8�;4�?D�X����:��%;�N�X!�u�����S�M�ĩ��E�@�P��Q�^��Lq���}X����Nuy�G@�y[Rţ~IK�Z�Bѣ1���\�t�M�<� S��̉�����ɱ����tSN*��Z-�\����bb�1BL����)M� )��a���g�0˵s<��BDO;���O Q��J@.#;����ڒ�C�u+I����ph5Z��R� Ǎ��\G�{C>?��Yb�dY�����BГ�_��ғQZC���=(.����j7)�k#�=�!6h�����\�Ot'�f���9�G0u 86)p�����r����9&�n�}���ԉ�u�5��j�x��_��5wG�^<N��x�n��.�����6����u�� th֚�t�4Hjb��SN�}�.CPo���8�z2�9|��30%R�L��"+^�#����a���EEy �Q:�XUʥ����,��މ�h�����0���$)�u��xc�ܼ>��K�l���_;�#Hn��Ú�{�2�œK�&Or�>����a�qJ#�x-�W]k�Oڸ���1cV7TOGվ=����91�*����X�@Hݔ�ɢ_�!nUo��Ne�ڥd�-�3��9VM�_@����X�\�L2��������V ��?{9��deb��@��ڦ�cN&L &��n���8H�vP`r����ǖw��W�T�P�W����T���0)�n�Ş��g%��5wgK��w1�3�zS����gl���:U�|��0LfHݏ���/���G�т�h�3!6K9�A|�~�$��ƌd���>^?�ƟR'Z��4��Dl�L�Il&�3��:pJ�X������G=�R���.ل#��.������%��SM[s����� y7G����� �`+z�;�����,l����QE�I��b «4Xti�"Œ�z��<g>�.2�8i�Y]-)������O����I�0�Xt�P2)���k8.(<U�������C ���4�|H7�"��?��y���u�7v ���_ơ�p���m'�y���K7�kX��'����]�%��rQ13O; �M+��y/�n�1a�5��m���' 3���_.<��n����?[~d�q���R6 ��TƓ���b0�ص C�#d�ώ�S�N�3hS�,{DN��BG�� J~?���t��_[j9d!�L���@�y�Yd��p���Hv;+�ŅÓ6�鵓�nCR ����4���8��3�Q�0�**�-����,h���9���)nt�GZb�G�1`�_{��?n�qoʅ�K���90���>1c���EV_Ej�;���9fʼn>����G���U�\���
Static task
static1
Behavioral task
behavioral1
Sample
2b440bf18999edbe082c4335e580a2ee4e8570025513296c15896bc229b9997b.exe
Resource
win10v2004-20240802-en
General
-
Target
2b440bf18999edbe082c4335e580a2ee4e8570025513296c15896bc229b9997b
-
Size
2.5MB
-
MD5
531c8a07aa1653227f3c4439f70a7c41
-
SHA1
fd57495fe5d113e362ff14ddc5cd8a97e699fbd4
-
SHA256
2b440bf18999edbe082c4335e580a2ee4e8570025513296c15896bc229b9997b
-
SHA512
703b293af77385ae046c65be52978f2c05d3992006bcedee582955ab2d27e715ac0bfb9d67d37d9a732e29ca65a91518b979d89756121ff9895a11e87571e72f
-
SSDEEP
49152:mmjDcyZbXrJxAMswO2oBKPoB00cjhEn/T2AMqJhM18Hzbg9Jg:mmM2/0eUHcQ/T2qJh2U4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b440bf18999edbe082c4335e580a2ee4e8570025513296c15896bc229b9997b
Files
-
2b440bf18999edbe082c4335e580a2ee4e8570025513296c15896bc229b9997b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE