ԅj�� .�|�fK��G�h�h�f� W6.�8���HKd�ٷC�a��S��x���2/�x�.R�%�ޭY�7&1�v�lJ<A�*S�-b����Z������'u*E�G�q%}���f��$�iX�h���SV&eBS�5Awȅ��~PA�Q���+=��{��[��S'�i�fVƦLWA�8�Ơ]V���z^#6W R#��t�i��u�l�Xc6b�d|"2p�=�M~��S�q���%_6����,2���� �� �/|g;��O� Z� I��Q�w�m�Efr�,�BM)�� ����qF>�v��<�l������lg���Y�$dՐ]��[h� .�v��GI*���A����v�La-��_��j��a�A��ֻgW\g�M.�^��*HX��G�xjyo���)�Z$�J�բ(�q�B������\��*s�u[�Hr����:�Ϋ\7�����)��K�A�^���o}�]yq��IQ����l�(Y�7ո���۸g] �9��o�-�k��4��Sp� q�`��x�!��[ŤK�F�Jv�ݥ��0����&������H����X��nF�-;�33j�v�3������Jf���VRw��hQ:b�ʫ∙� �m���c{-���6�Ⱥ9)躼��9"�!-�s��O�lj.^��L?>����H������oN�ݣ���J��b��#�/qT+��?�L���v��QNY�5������;�I��]U(X��h|�J�AԪ������K�V~o���D�n��x�6]}d��).�����_���M�G�رh/= �!�^��(x�<n�n��i��48�mI[��B5��=�Y[����*S�����s��M]�.]!����Mame{M�K�r�;�������XFD�9*J/H��M�7Ct��Ja����A--���v�.��a�Ҕ]����Ò<�J\�]�$��%Lzh# �Q͚�������4�VI�,}��Ϻ"�yL�a⻔`��"dC��~��b�ut����Z��T��h�-Eo����d� �,�x�xM������z��Cd]�*�J9��v�!����Or�jV�Yל�����x�����Z�Y&>� |�����}%��cz�|g� �/�F��Qn��r_��֘�y�����qC~� Ѱ�]�(���AŜ6��d� ��j� �/F���{�}��a��b�Zf��a_f�ܯ�?t�㳦)�-ݭUKJ�?MM��yAo���U�w�I`�� ��H������b���D=�t���~6[b��ؽ�(�����&^�|)�3�&!+I�.�i/ς?�,~�y��y �c 8����px��;�t��KP�=:�e��փw>"yjS�N�i)��(J����Q��:v��.�����ƴ7���,���9$& w��./^w�-c�Y�}呭�ch\�e(�DS�8a!Fq�{�� �>|���?O��naQGn&�L��;$:��]d�!�9�]�R��4���2yݧ����J��UXkޏ �^���x�6��k�)�X�0� K0cD�A���:4pi� ����s'!{n{�`�yP+����W�Ճ`ɟS�%���1�!8�֣��1���7�dQk2׆��Qz�!���8)*�?�~x�k�j|0�-��4�@ʾ-Q�����g&TR��m�=XI�wO�1��嘰(d�Vô�$R�,����i�VC}��q���ɝS���,���GQՍVD�Lb���x�KKb���#��Rq�7��#1Bf��4J��O��[>,:��)]k�ѬPY�B�u]쇫f����Y�r��UODN��8g��⢄k�*R�a��e��{qu�{~*��\��F4]������Hw[y�Һ\��5e�&����0c�t.���C$��v����9x���s��Ҏ��NW���z���N��ìK�ⷵOPyCI�Y�>{��8��ZHLm��r���a�C-lg �I��Z9�u/���l�qTU_���n/���� �|��v����Q�G(�Ft�CP��X��K�H��ܘ�e�X� �`z7����~n2��N!�[����`����\��)�̺�����21p���Z���0�F.��Gx��T�wj�:wS���VFrϿk�)^��-��m�g��]� ��>����@f�3�:�G��o�)�V��`Ո�D/���c� �R��� ��г�$"�qm<_�� jvv2G�v=a���<fP�'��,���F��)�������(�Ba��Zc�����CoFm �N*�G^N���A��jO�)����(J^{���o�0����Ei�s�%�8����/���Y9�n�n��X1���ڳ��4ԑ2 �8o�[��T�{����}uĞ��,�FFސ�����z���^�r�0~]Xw���R�nK��4�)�TOb�^��:�s�.��'^RL:�s���(v�Z��"��̰�����_!�(K���~D��:���{lB��3�2_4���ܥ�{����@wtz�~Bi��~�kޙ���37f�?�_?�f��#kIs]vn����2����D�c�h����H:���B��˔��: <�8�z����+YA+�Ư���f�%�,WZ�� o�.�kd��B{~t':�9:�Ѭƨ�<�� �=�P>�N6�������Fv�Ɣ`���ހ�hW�*��6��Y�.دo]?e�=^��t5���wv*�ZnK���&�y��N�.�O���t��?.�?��aQ����/גj���oޡ��k6��D?l��W�Z�����F1B��0��3�@ZMËc�Ah ����6��A��)����w�Z�@�'��0���BК���X�QbJ���勁�pMαlnj�u���e|@�D���F�6�[��NJ&f�!s�Ԭ��lr*sU���)�]{&�������Li���`�5;(�k����V/b���w�gTY5<�o6K�g��4��r,X�G�i��1�.�4C�e�{Nah^-�Y�n\bZf���r2� �^*H/���ufd��+>�Ns����]��v� V������ض=E��%g�j_�4����Ϥ���A~�o���ѽ���\4�t�C�KU{���nO�pfNl����T��U�[�+tZO�i�t�"��_�;;��#sD�a��y+��h�ԥ?K@J:B�?��_�Y�$Me��r8](�+�4+[.v�NН�לo�7����&ny~��k�r�K�q�������.��xC����e=/;�\>T(��B����_�3yv��'��{�x�>�oh���zv�q}���W!Oza�� ��e�F��~/��GM)�~U�M�.^��-�c;���u$aS���/����Ӕ�ܧ��,�}²�W�����W�tkh���By����v�U^m-K�} ��BH\�������ꠟs01T`�ߺ�����O�U�Dj����m��bK.GD��{�wi���c��W�D<UBf��X��y���_;|��ߢk ��������Zܳ$��vB���@y��LVЃ�)` O6��3tÆ�5����ޝ�6���t�x�Ub{A�!%G�&�k���`ɣ�}Kq:l7��=���_���_rE�_�ڍ¢�`O���4�]��Z��䦜xm�4L��c�z�!��S�>4n���zo9�`
Static task
static1
Behavioral task
behavioral1
Sample
77d28d182a50cb1b9a6887da20bf1fcae5ae3d404b5b956d53176783f5261d8b.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
77d28d182a50cb1b9a6887da20bf1fcae5ae3d404b5b956d53176783f5261d8b.exe
Resource
win11-20240802-en
General
-
Target
77d28d182a50cb1b9a6887da20bf1fcae5ae3d404b5b956d53176783f5261d8b
-
Size
3.1MB
-
MD5
af4121e47ec58d37268410ac4fa7f287
-
SHA1
296342c7dba9a6cf87199b0c3b6703173e12b44f
-
SHA256
77d28d182a50cb1b9a6887da20bf1fcae5ae3d404b5b956d53176783f5261d8b
-
SHA512
19f60a4c899c17ba499e84b7be944705afb08231dd8149c27f2712f99dd080751d9958f051e0ec0bde14d81a0abbcb68d991b310a1f982228cf637262c5fe65f
-
SSDEEP
98304:WBI/XgOJFY8NtLFJnZTKppWMxsPecxsAY1VH2U:W6/H3LT5JZlwtXVH2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77d28d182a50cb1b9a6887da20bf1fcae5ae3d404b5b956d53176783f5261d8b
Files
-
77d28d182a50cb1b9a6887da20bf1fcae5ae3d404b5b956d53176783f5261d8b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE