�Y���nœ��1��;x�U 煉���I�2�:Q�_�����UlD�n(�l�秔z��������&��۵.=�����â���9��Q�f�7P�� 氯m�o�zJE��F���Ak$1z�č�O�����.���7�v�.*��~�Y�s���>��F� �����w���io:4Y��D����j�[qD_���N����?�����8h��]ٹ��X���0��V�K����Fs���� ���֖�t��(W�l�o-��}��{�\��R�J`Er i��#+�E�/ ��҉���汫,�o�*::H8۹�Z�p���A�qs��O?���\��K��H�R*�� %�z����v�ykL�4���b�p�~�f`����r�I��4����u �"-�!��{�c�6�?/.�K��ŠW �>F�ĭst%ZTd�T�+1)�{��˧��w�m������{��瓲dQ��U���Ϸ�!6��M*l�&�������,0��z B��������fE�E�������O��K"�wKd1�Y�M��5��\��t�vB���Q?��GC�?6��x�1f� a&(���]B��o�j����u��v=6�_8�Yi�S��0�8�,�A��-�P���2���P��I˷|dd��v��K̹���8��� ��ޤs��Zm�6)���q(\7�3��.J�r�O�r#Ov�z�Z!$�e �{9Cy�\��l'$�᤻�A����3�ED�����ex,AcS��N@���q�������՚QJnb�z<�&����֊5�؛�gݿ������0��c�B} 2{��b{�Jr���������tX�9�v�J��������o�`^{���������1��K�9�;"}aZLEL��=�����G�t�h�O���sȲ�E绠T|kP�� X�"�b�d}��f�i���07���U�������W�=eE�7���tb̢�HȖ�� {��-�\ �{�o�N3��`hZ9�f�x����$��r�<4�B�n���毛6w;��#w#8B���#�FF�9]�ǷOq��y=p1 �w���2p�O�aG���h��s���~�Խ>�KT����Ă��g::[��5�ԅ�P��e�����Tx�哮�e��]���d��0V��S�,�`L体����"���#��;~PRk0��M�5gN�PX4%B$��m��)e��UO ΖO7{��>��CT_�G�������JbK���dj�z0%¢S��{���5>�#d@�\��{��;�1�����#!q:�8�^��~�*�b\���Jܢ��2�dq��ٖ��Oht�T�^������#�w�����P�|�,1��ۊ��.�xјB�%�k�@��&K-cxYW]23��K�!���p7��S˱� R-��q�}���䷍%|0`w3��?{.|��%Y=��Q�,��e6���%뵒�2��O L�1��҅ynv�~��ה�:�M��y��+qhJ¾-_�!粉>��'����/���,Y��W�L���A�"i� �t ���rIv�O���ܦK���+ R: �Ń����UY� od�Z��u�gr����B?�"�խk|��9O)�l܀�tM%��X�>J�-M�-y� �� �v����A�r�Z�ȁ���5�c����t�I�/�uD�)��>���a�9 �2��9�~<ʵ"]�//#'k���)��:��H�u�X�Q�T��yo�B�vG]k��z.�}p��q~�V�/&�>~x*��*97`|�:�\�SSJp���Ճ_:�n����� ���I%C��&�A�0by�����l[�#��?*X�z�A\�6vp%��{3#�'�Vn���^E�����DJ������L�R�x�2��aC�`K���KI�����rI4�����N�3ԗ-]x|4o���ْ��UE�@���Euo˹H�;��G�Rg����;��J� ���T���W1U�e������{"�������^h���w��u�����R���a_P;�偀���#RN~�?)|�[�i��Sx�|�՜t�jw&t�� P�1����|6]�G�{�]����<T?�D�|l�U�y^�qߺ�N�J��"�sc����&� N9�ӕ;��S#U�fb����o���(���0;��IJ�� T��k��h��2{��'^�q��cJ���F�K�c��B��$��C�!l!�Uӧ'�r/����Uk454+�4�d)���V�V�Ac�7�x�zo~���gU�[��J�����K~�֤��͒=��l����t�%\|G��6��������@cHx-H�9\_�6,�����Ib|�l�eG_ �oj�X�I�S��]�:2���%VS������c�qyB�(T�&�iH�����U�䞒W}tC9H5f�:Lx1k����{�2 L�{���.��G��|ȔU3 Ӥ�ѥ���_�B�'g~�48��q�zOvY�L����Cb����/ԣt_V���P���˝n���Gt����h�Z�ƞkNj�:����R�a Z���!b8�ӄ� �g��+���؛(ڎ��u�Cĩ�����[-�[��rV��(3�R� ـT��ebu���n� �x������!��O�}�@H�4�CrD�__߫9(�rc��8�C��;�W ��B# \�6'*�%���6��!b5�b��|h��������M� �!7�#�9νp�j�̩�!,@�hM��6���� 2�u�6b7��#�*|��֦n7[=�2M�� X���)�=ה���/\d����ۘ�aa�6J�sD8.����V}��}8TsϝC��8�`��nү+zDz��ː���.ou���*7bR���� ||��Hű=ы^!#X@�,���6��,�VǼ}�e�3zؘ��e,=�RT�g)|��+��f�\�!�tO�S���W#�-P�Ǽ�z�p��f��U�8����U�c�>,%��|O K�5>�>oz�/=P�'ط�sW�N�"�.w�[X�.HiDg����_s�k9�<�{TC��� ]���V8�8aןzn�)ƚ�9��^-��AkC��H�#�L(�J�6�L��U3_���&�Hca,�y����3]CpL���HP ����:@g^�m�˙)�R9�%�,�r2�b�����$��U�.� �h�";�ǶIv���93ՒU�<�^l ��IǑ�N��i�q%��!9�k9�\6V���Z�r�����& �1ѠI�2 ���W��'�b6��>�h����7Z���V-�����aW�ʅK���E�����Era��t�H��gR���b]B���ס֥�.4����(���E�nE�朾0�\�Bt��+l>�,Hn�:��z �-���{���;f�D�WW�@��������s�t�&LB�s`Lr0���.
Static task
static1
Behavioral task
behavioral1
Sample
d0d9fd011301ec943930a678e051322c963a01e42673407707f512e2ab6613dc.exe
Resource
win10v2004-20240802-en
General
-
Target
d0d9fd011301ec943930a678e051322c963a01e42673407707f512e2ab6613dc
-
Size
2.4MB
-
MD5
2c558d39f0c2d2667f5633db38600a1a
-
SHA1
f02d31fa9a0302a14b5689d1acd1b8be11ee9092
-
SHA256
d0d9fd011301ec943930a678e051322c963a01e42673407707f512e2ab6613dc
-
SHA512
696aaefa482be84fa083a8c14c3029459c127502bc444e7427a2f3274106a9ad7dd21d1380b833abf4ce4994941929e0800ab7cfe53ab79f399d07a4985902d6
-
SSDEEP
49152:xpySNEqJnuXjkukgZqg2zChLqaZZO/dKgR3G/+:x8SNEqJuXwdgZmzChu8gogMm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0d9fd011301ec943930a678e051322c963a01e42673407707f512e2ab6613dc
Files
-
d0d9fd011301ec943930a678e051322c963a01e42673407707f512e2ab6613dc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 43KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE