��LL��g���f���,��l�L'��uk~��9��'ʄI���O�b%V��5]ߓ=�}0[pD�_��f��Yj��P�� _Ffh��/�S�&w?M<�1-��B��~�9bJ�T�y��[��Y��p�����~ +��K�����<Z]�C���:G�������F�誢s�P3P�7����TI�4)�1� e��|N^ �|���#�����j��O�� ����}�/}���d�Y��A�ĵ��6Q�Rz������.����w���p("w��J�Z�|��7<�,Su�� Y��lۓM�N��Uoڊ~� ���l��5�)�\�ğM���b�b �y�5w$��ɕP�̧r*�6B�oҌ���f�M�bAA�Ђ�H�ֹ>��Hz����(����r����f�C�&��i���'�)�x�O1��"<�n�.o��`�N���I�,�ԡ�;���r���W~�\���:�{�MYO^Jh\���ڶ���ӽ���hJڝR;9������"��5�YdOI��d�H��wX��"b��ǔ1l-��!�&d1ͮ��h)cc���)�ia$���?]I�t+�BA�;4ԕ�깨���x.��5���c�"bG:�&�*�#X�ftl���Y�0�ɋ@W�$7o6+��]U�Kַ)�� 4�c� ��\L���_��.��G��g�X���3��2m Mnq��$iǠ夺jj+B?Ʉ�T3v��� |y6��������`����0��iB��G��b�Ş�惂�ɥ�T$����O����_�����#��hf����K�q�s���f��%i����@�(~��,x|�X��>At��J�퍟I�}�Sao�K�W�Šb$'��~��++���"*�N������F�娳Y���+����s"�m�*�K�|]5r��. d*֩�o���2�[�]�5;�1TG�2 Z���S��_vd'N¨p�+a���dT��CժG" �*�=G��������[��0B���$4Y�D�'�y��鮀�~��j��7/�����}~�*h`hӄ����09��˿V9J�+.��<��afn����W�y���3@#t��-`�)x�/�C0"�I�e���k���'�Lu�}r8���j�� *NѺ��XSt����i����x�UZ�鯪嬊c3��3�DWbq����Ve��z�M/�E�@/�&�4ie���/^a�ww�(��ٍ�� H��z���Y�9ഹe�����A`�mt&����!��bJR�$��T��Cv� /� �uR> �5���R�`�������V����V�{�{-�!z��t�`�`��)���Q���B=U��"��@[bψ ����^Tr� ����sut����ʘ2��xt���Z����_��� I{²�z*��1=<�͵�Z!q�Mr"R=��<�x�H�.�s���V�=�p�鋓+O(�hG�U���Q'<�x�;��1�ۿ�!��k�v�v���1��lT����`NG��4#�K�s7�l��IH�)ʸ��/�7<��i�C���>��|���&��>�Hk:d� �Z���"(F2y\�T��vB�#�Y�nJUa�F T'��y]��厑�[����2K�3-��Ϳ/�Aw'z�bh/�������/�V�fY0-�P��P��^}�p]bRL,q�rϹe[�ΰ����sT^? �<�u�UD�9M�+�c��5���h����@���k� ,fR�{"��� K�T�<������,f�\��L��(��Í�OD��H��W�&;x���Nfۨk���ݎp���^GO��YِT���%�ط*Y~�:��)� ��� ��^z��?_����X<���0~�w.�q��I�K2{騈o����a:o e��^8ZH��X�a�����a�RB~�^m0o��BfēE��\�aP���J�&����h؏��0�������e�'������B�J5��VP��V6���msO4���|d��v<��s{�����%[�f����Z4|w: )�8 Pr��U�;<'�:I�l_�6Tv|Z�Mhrh?�?��'�Vn�v����`��cH��JMC��b��z��Z�7���V�L�dqFi�t �rQ���ޮ�L����{'-%��1-��1"i+��>A�uZ��G�D�����*�����me�?�ƈ�K��wI��@=�&&,_noX}S�q��S0y� �`#mɳw�Z`qq��G�oL���&@Z$����)��Iz+^q�SPo�Q�w�?n���Ig�h2�cr9����.���8��9��El��4�� 7Z�ʮ�v�<�V��D".����l*��*��'���m�EJtא�\o���W�$�����*Ϲ]?�\��Y佯��+�yգFLھ���@J���"HX�������K�p�tqL^Ix�%d��RMv�(�>t��� ���&���Z:��a��(�5�D�#hf�H�2 ��k[�|�̻ӣ�MS�B���\'D���L&�"�b���6��L������[n���ޮi%)�+cBO���-�\�2bK�L=q��8�0���{,���XM�]h@G��`�?"�O���f�C�zt�x���Kx�~&�k'( 1�M���R~���|�{2 C����Jg���19�x ���8ܻ����<=t��kĘ�7���Q`[��,zۚu�%M�E,�^2��'��q̍>���a���},��tϕ<e� �m��o�}��u0�Y]����1&o�Nz�@�`6ti����E'�4@y5x������^�5WWYf��P��s7��~�JW��}���i2���q ��-�ꯣR3k{�f��eӿnzU�� ��ݨq�E*)���cW����.�t��wE��+?Gqfa��)��2��7��� H�d4����^i��f��S5��G�R��^��6���K�U���ۢ��チFAmЏʭ���"�=Z�`���<�H�����a�Ayd*8��4��b��@������5J2���>�B����}���� p��/(E!g��sd�+����LxR��w~ $��wP��d�f�����rP�H�V`y��*���'%��؍w�qSX��m��T'[l�f���x�i�����BB�1�wPr���,ki�9���w=�۞P#�y�B+�4�Hl���2t��st���Eak���j�TkAڃ�渚k�6XIiLHR�4�N���گ/nW�dۦ��J��6jl�QX�3��. ���(qLSי�_��s\�m_]x}�B��o��I�i`��|�+�O�h����,`���-���/�0�u�1G�^ε0�I�y���mv�"��b�i�3.*Y�k�i���O��3��#!��"l;���'���O�u-�6���}��f���.�+��~\���+*J߽�]KY6\�F���Ja2`�H���!tvI���k�B�WbM[�v�:�M1��@�K��؉e�>�ك�z���B=,�n���D>���`E�ѯ����?�b[TC��"�,%�v �_��P�{sɅZl�)�ud��]�0��?W�i��!
Static task
static1
Behavioral task
behavioral1
Sample
332d4f22c977cb96f4915b15ef24ce6828d936744772b5040e303613911b9bd9.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
332d4f22c977cb96f4915b15ef24ce6828d936744772b5040e303613911b9bd9.exe
Resource
win10v2004-20240802-en
General
-
Target
332d4f22c977cb96f4915b15ef24ce6828d936744772b5040e303613911b9bd9
-
Size
2.6MB
-
MD5
33a15f2df2db252ed82fd4032af7d758
-
SHA1
13e42818c74d9b92f74786fe1ac22c028fe0ff42
-
SHA256
332d4f22c977cb96f4915b15ef24ce6828d936744772b5040e303613911b9bd9
-
SHA512
1ca38b33cf6c8d523e54649a3530a65d5e4c39a1096bb7bc5357ba1c9970775d1f51a974b234dfa5028104b4a73980241e70f2a1fc4c16e0b4225d45693e84ac
-
SSDEEP
49152:NkaeAfXb+sspNShiVtaI0RAKwrsu1fKu/W4u4aHzZFDzgKcWDY2unf/Sr:NkaeEr+sEgzwrsu1fKqu4aH7LDY2un3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 332d4f22c977cb96f4915b15ef24ce6828d936744772b5040e303613911b9bd9
Files
-
332d4f22c977cb96f4915b15ef24ce6828d936744772b5040e303613911b9bd9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 316KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tsvmp Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE