l/ _�XJ�eÀG�/�yZ([�yl�%�;Y�ӗ� �E�B�F0��"�t��&�1U���M`�7�I1�����1����9�"Y}��5(_(J��ǯ��vL���Ch��$��6������� Z�}s���f���b��%��3=��;�&In2��"2=��[��}�<���^őfrZ������6��D�rN�� �M6�k�i������O�� (��4%U���߶�`}uk���qQ���֏\���HF����?�\ͷރ�[�,��]<�͝��^���Z�����na��?���C��F��6?aN�I��Y��5�Y�kB�5��ȵ�j�ʨ�f��X�3��~����mk�vm�c,�r��a�Ҧ~�`��]�1;lAs"3��E٨�ى���ij�8Qs��=2|�v��&�;�̦�C�,S�N��kV��$�܂<�<�l��o�����/:����i��{I���h�>=�:|�vJ��X;F�����C?����.m�؝W����}���^���m�؏��y"HE�&�+C.��%MϢl���s�����Q %�g���ÛCU�Ö��q�/��M*H��%�C��NA�ϙD�7g�� u^�ʁ�E��?f��������5��ԡx��3j�K�y C�'S-���P�\oj~���3�6%g�f�,넫.dP�����І�~%(P��Z�����N3�dF�rf=66�f{�'�SmM/�(��Cu��/zJb���|��2QĎ(2�Ĺ���G��=�M:xF�(q���"�Z��%`X�rK%�D ':]��"?)�� G$5�_�i=�z �I�7���8H#��y�Њ@E4�#��� ���uF�i� �0 ����f�� �p�L�x�?�i:X �zq ��|/'��C�ˬC�b�Z���J�hF[�o�����)��=&����=��V�M�*�����_��{_�W"D{��n0�C��o�`�21�����>(�ZV�����ez.G�s� ��9]<�f�ZZ�rl|U�D��_a�o����Ѳ`eo����g��+��GM��5yC�Y�uQ���f���"��W�����31���kM}����Q?��썪�.�Z�7���U��P0����zaA#as�����6YD�zg��9"�S��$X�����z~�w=�EK�JE,6,mC2����Wh�-{ki�����驛X\���!a��L�]h�I8���<�UI�?f�k�CV݁K/���yI�![e���u��5��^�B�=�UV�)9�=� G��kg�/Xc�ЅB1�\����hP4�����Ԥje��fy��.b$�[�w/���ǜ�4M:������o��&K�ړ5[�9�Ǜ���!�a<JC�\�,�����z#��^�%�{�FZ���H��][7�u�s yn��N����\?�5,��5���ؼ���(�bG�g��<���A~��A=y������Tt�1>|H�����ڵ]|-�C�C�`�Y��G/|�F������Ya��]ث�E�eR� ���R����+e�"[-V}�6���e���t=&f����0�Ό�Pb�3՞�/w�fa���O �;�dcL��Y59� @h���k�������$F���� ��d��H��/Hu��Wd\����A_��۪�h��ǵ�� �M*�{�^:��yG���D�W,|t�0��^W^������qe�� 00�5���a=Un������f3>f�������.�*Q�+m�Fq:�����o����%;Ӹ!��f�muX�[U�ߎ����M��� u���io��a2Ձ�\��vK1���i��ŧ����ͽ~�k�Ħ��0����F,K����5�#N�ϨQ��v��� Q�MJ�n��U���%�B�����|��<�~.M%�F�G�n��W,����W�{�=&V�k'��\�2b��MD�|�� 얡���X�w��M�KI��:�5�]z�*bn�"w��#��Ry�f�!�c�a���5�T����%Z]���H��`A(7V��)��6b�=69fA�1���1� �>w�����d���7��"�"04^�D���w7��.���fl�Fw��.mp�G�K|�]��?�ё-4=�U�J�S���@�RZKA<u+i���J[o5gͽ����u�q�;�z�0@�+�x�%]���1�^6���v,%]�O�c���� ��dS�8.�Aq��C��l�;`�K� +C۔d۸�g��*��ᗰ$�gZ�ifZ�Sijk*�ԗ���@J8����҉�u/d��W@�`��3�KO6�y�����Q�s�Rչ�26#.>ؽ'-�?�V�p�����&Mes(���<~����rG�s����� C�'�e�@@Y�c�U~�/����N��*� a(����B:�!�M5�#W���H%�D����"Akm��dV��Zo}�F�m�����3��օ?,&j�0�!��K��q��e��pV%H���Ξ�����>6O���@cN,���g?��$�G��1��I~�l����{����bw�ck��zH�?�²=���)��U����r }����p:rx�gb�3���_��ͧ��+��Q͢���E�N���a�"���`rmr%�Q����ء�� S��C����V|ζ2����<P�y�~ia��ĉv9 }� ���\��%�Cs��D��3q���.AT`3��% |L?�FQH�h!l�q�W��K����u�V?�H�j��,=I���9j��!�)Q�M&�G(�&KWRm�������I�X�?'�/ұ�'wAv�D�tC�S���4f�>�i�&�a�Ħ�Ԅ'����/�q"8$�����*F�)/�!�%�Ѓs��^٢Ȑ$B�`e�A�8�@ ��q�a�-�|߃ ������S�A�s �mD�[>��[c���^���w��oc���g!��Q^ N��JU� �;�Y������ �˯C9�<����;3ڣ<�1��S1Q_4��KL ��A� g�|��F:�P��p�c�BHu|��� b�QA�d��>��n2+��F,�0�ǁ�R�6�[�l9�T��+��
Static task
static1
Behavioral task
behavioral1
Sample
535e1bcef23130848bcd5c8ec79a3a6e14e7a40d47d53efccba708779321c2aa.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
535e1bcef23130848bcd5c8ec79a3a6e14e7a40d47d53efccba708779321c2aa.exe
Resource
win11-20240802-en
General
-
Target
535e1bcef23130848bcd5c8ec79a3a6e14e7a40d47d53efccba708779321c2aa
-
Size
3.1MB
-
MD5
d29113e0fc35efd62159aed75d283948
-
SHA1
51400c04ca4f0b9e92fd7d2f6b2278f241924b56
-
SHA256
535e1bcef23130848bcd5c8ec79a3a6e14e7a40d47d53efccba708779321c2aa
-
SHA512
3f36eb85765a15fa0370cfe5f1c6c21a4b24fbd2088ea6de3a6cbc97e14b4d8c518d881bddd72c39141dc0ffe36b1da9f2219eba88edb65cdb7b596d35678aa7
-
SSDEEP
49152:ZubM2XmJYVmDCAyNHH2AT5O5hLs9UQhP/ZvqwC0+yX+Rewsn+HE:ZlufHWAT5SU7hH4Plmk0/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 535e1bcef23130848bcd5c8ec79a3a6e14e7a40d47d53efccba708779321c2aa
Files
-
535e1bcef23130848bcd5c8ec79a3a6e14e7a40d47d53efccba708779321c2aa.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE