�ˆO|�>䑌�z���fMo�x�E�������>���.L[�Dp� D1��N�A�ф�קN��k�zYj��J�@�e��B S�g}��F���N���$Y�ӭo�����eBdB��3f�^7®�k�*VK%@�u[9�◮�c�cG�YC��4X�7I6� ���%?@J�̛ŀMi�V��ɡ��]z�2�yo�e�Su��d>�[�#�빹��h�h��p`ˇ�� b�6���vJ���p{pގ�?��?�x�ғa�N��ħ�}�W\�;��Z���s|ԙ��^���{t%������3���Arl>���Q��$c0� x����CQ�Ȇ��8��*(�)҂��V{��R���Ƣ�/j[�3�u��#h���˧fr ��?s"u���Q�_\���֯�,��{6Yg�4ںw�o���@�TR��+��'� ��y�0�v���l�|W9�G E��D�_��l\�N�{:�{�{%���W\c��� g�,��^�V�__�l�P�# D�rR���9L�t�������G��AN�o&�������^h��u�Y����;��5m�����R���b�fb*���CܿI�%A�������8�gⲜ���$�[q1���wˣ7���<�K����gDT��H�jH`����κ���tN�I����e<�d�A0�m������eA=kԸ�^]ۈ�w�ۡ��]�)�[aMҡ�M��k�p�=��� ����Z�hC�!����ƽ0{��ltN� �.�B������)�������*���MZDP��rG�}ݾz�m�S���?�~jʨ`N���������s�V��m�����q"k��D��5�M1��О��lj����Չ`)�?�JJ���w�CtQeȅI�M�x.��5��?��tH�L5��s"n|�RB�9�d_�����c��^�{���( 32�[�+!���� �ו$S��/[�FZ��������I7E-+�2��OTXDJD����W��1�g��@L��ͺ�,(Dv%��֠Q\�8�����[HT��QCv���5D�->�d�K�����i�H���!�M�3���|�'Qt��c�A�/�"�$е ��Re��|�K�Q���oJf���]��f�A_�`0�«vn�$��SGr����Z��ـc����H�)���g�Z�S� ���V9E̘�y����N��=���(�LƂ<�j7�,�W ��.��+��A}����;4���]?�g���\q��nj�L�KC/\i�:���Ѧ�p�V�9Z�@{-�آPw_�oz��Q/��+�����;Lq;��z"!�סO�i��Ǭd��\���������K`RB��@l���������i��0�4/�*S,/d���س��V�d�AS�ΤP��L��]MZ�|Jnd�;5��e8{��˙��w������+�����Bjzuz0$��x�ڬ�4��p�? !��kcb��s���4�`ĵF�&���GU��Ĩ�u� 0q¼G5�n�9�I0��G�� ��X���;�~�}eI�� �L^�U��RC�9�&��`h����lq^�g2M�Z��=�lbm��&NJ��Sy��Y7�b�OCp�Ţ$��dF�X�>ґz��ub���-R_ �՝�갽k�� ��g��@{���;����/xh�����p�=ꔄ���X R��)�x+�ަu����j�]1v�V��O�M���=qc�y����������$eC�7,J/�Mc��.�w��4��"����0:u�!�ٕ�r:��$�����N�7p�K�S5ΎB��ܠK ���@v@�EU�=~ml8 ��r��KHN��&��Z�H �z �K�5���5�h�I����s�/�<\���K��/�ك37��ܐDd�6�� ����H-J����1��Ԋ�V?k��~5�V�~�5��v�E�#���@N�fѫ���r;��"�1��+�V1b�y�,u������gK�y���e��*֫����kR�c������ T�tC�g2}�4��,ژU�V����-O��V�y���c������|����kh�}b���ת�4�������������F@ �OfLъ �C��^���dt@oθ�p��q�Ffһ�O-Δ���b�.3v�#V�����;B�H�F �$��- )�hoK� %�D�l)lz��}[��H�V�$kl9C7�����<�D��y��K���Iū���<�8��P��ޝ���K)n/�'(�v����bE�?� �|��F��m�W��=�Q}S\�x���b�("z� ����S��7��H5��<W�x!���A�_lp�{��F�L*'/ڦ�Tx��W;�M�TY1�p�;5��*�����b���_�a㣜�{$�ՆH�:UR��7��s�CՍP#����eR|*[�!onN$��1�V8� ���9�R�-}:�DYl����~s���j^\u��i�W�O�T������S*�щ[t=aH��1 *�,#:"��c!�f���IC���#Os�L��D�c�-�y��W�w�Ud�Z+|�ρs-4���k*�1:����X�q�C�5�S����v�唢w�P�bOr��;�9|��/n��y� X��j%yi��F6zND'<�&�l{VX~�` ߛr_ˣY�v�\�8���2�-�!�|�H=ŗu�ԝ�)ZF�r���Y���fs�w1����������B۪�����OK�� �[p=G��@!�:�2����Ư��B �¸m�Tr���~�g^�F RI�^���ͦ�8�܄�(� �4Xh�����F��I8UO��lO�HC��x�I��_$�� �zo�K�[N��wH<�s��F��i�9���K��s>�nhd����R�,���0�5 �k��W�,vF�Q(���>�S�go~�,� 8l֤^0��hoZ��E��F�>��rӒAxߺ��3���x#5������6G Ϝu��Q����nio g� ����D��w�O-g9P���&�L9eu](&<RV'�q�B����"���:9�仼�CW-$�D���/#��y;S��� ���. �_�pþxV��%m T�"����v�"��*�E���V�+��d(A4�B�wj�]|��=��2�YT�N�z�=P�)�p����9ܕa���-o�J��`�|�ɋ�j�ϜY��`�5O�RY�ӏ����^l��I������ی�<?�N�*��<�Q쌂/C_Ģ�����\��I�
Static task
static1
Behavioral task
behavioral1
Sample
00a9486069b7272ea292600fab9189b2119f7898ff4d7bf69f364d9e6266f485.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
00a9486069b7272ea292600fab9189b2119f7898ff4d7bf69f364d9e6266f485.exe
Resource
win11-20240802-en
General
-
Target
00a9486069b7272ea292600fab9189b2119f7898ff4d7bf69f364d9e6266f485
-
Size
3.1MB
-
MD5
d8102d6512a5a4b1e145f4a8935514ba
-
SHA1
d352b8c8dad3fb81ad2110f9ff2ed6a585ece5ed
-
SHA256
00a9486069b7272ea292600fab9189b2119f7898ff4d7bf69f364d9e6266f485
-
SHA512
d8c2f5242b753ce3e56ea38c8e653fef2e838668c860cbf61bd369be793e730f2b8de8acac57e667f4077dbba743dd1cf6da67afe17319b2be71d8b4f2677429
-
SSDEEP
49152:fMUE/2kvvuqKLd468cADjD91KGnwIBXOxAFESpJX5nT/AH2Fd0Xw3UoOLeYZQVm9:KzFK634IBXOwESpfTS0LkoOLeO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00a9486069b7272ea292600fab9189b2119f7898ff4d7bf69f364d9e6266f485
Files
-
00a9486069b7272ea292600fab9189b2119f7898ff4d7bf69f364d9e6266f485.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE