�Һ�W�h�P��g�{�}�t�5�?�41u!;�XQ�M��#�rd�7^;��r�ry`��@7���椨/\��@�|�y >�ci�vӃ�'�9��x����ҧ�>�;�����֝W�%8Տ��B|��_�s�o���Z��+�-�&���T�� ����-�{^ 5V�I�,�D��=�/�2��\�~�����9��zZ7t��������G�K_������?�X\5���;�ad�}�K������n�����"R��&]&/�G�~���}Tk0Ҍ��F�,�B�����]^��`܀���ĘzCGBTѥ�ye�j\��\��o^)�$p���K�ds�������A���*Ԇ��X��#P��(au~��ӫcu���l�N�U3��fc�(e�ZvV��:ݎ�;����6��L���!�;���!ސ�>y ��g'�&= ��djᆊ�$ys�sy@���/�j�/'��Y/�����b�ʸ�ۑ����ڐp��F�s� ��9b��%8�96�0�:���t�V!�2P�Q���k�5d�<� ����G�[�qcEorVG���$ ���c���r{��С�]6�J��#qv�Z���m?��d�<��N)4�P�Z C�������`�*���X���zg�t�ٗl�]ٔ)�9~v�=��\��f�I3D��ǧʸྟO�QrT���}I�d�i�3���.���G��X����q��o��4;�U�*��^ �ZV�fI�jU[��fit��7�b��Rk���B�ʄ�\��܊L���nOD���XR{iv�*� ��Z�s�B�����q_���@>��i�N!)��[ؔ)"v��QO]/��.�'4��!���9��)����j��T���Q�H���&�Lu��"��|��A���R/�,Y���Q[/\��Z�H,6 �s��w��ex#נ��W ��QV ��[�.��¯�J�sU 9e��M�痰i�fr����&� @�WΓ�}��kU�GF�"����T���M��%z T�FL����.m���3!isZ5TL�����F�u��~n��1��s�b[XWn5v+s��ȥ�rmE�<_ e���t�l����Gm��H�^Hv ��j[o�G�?]ݫ~���(��k��~ilJpT��t�K�����8��=AuO��̋���4��t_����t+���U2�ĕ��8Rv��J���{h�u��s���ʢ� �#� ��Q؍(�{t�n!vƿ���t<��ِ������&�l|�k�&����6��jM���2Ok}"�E�Ԇ%���)�k����~�4T�s����V�TV��b߷3���WU��S�8�tEjq���IA��b| [6��۶k?�CG$NU!a]�U�8l��i�VD���k�w�t�����$��Ma�����e�����.���"˭�����X��V|�W�I��N:6Z ������;���ϳ8D�^w;�qjק�5\>��ץ��Y|�D��7G�%��p��b���a�5�7�2ug���s8u��{�h��@���b��Al�D ��W��H3>aP��6��r����-h��1���<��"�x�֠�S/��� ��K�;���d���{�xA�8�˯qW�\��_�� O^y�tr?NoA�Q�:� KeL�'F�Y'�#�s��X)zI����� ��k��th?Ɛqk$���<9�M��TQ��3�(L�oӡ��ț뚽 $`���B"7�4�Q�0 f.Lt�]��[Q��)�r���{��[:��Tj���ԩ��kS��HjuY�8V{��}b��JZ��&S���a�����p��P�����[� �fi�:���ݿty���W*�:Z���qr1���ϿaQ�,�m�S��'�;�TT�i���ſ���9g��,*�R�ɻ[l� �0?ԛ T���}3ϯz���g��%�0[�ļ��YG���TOb�#W�c��@EfdG�p O�m4(,�0���3A�vwf��zʥb�*R!�b:s�����ʏV�ɲ����H4��A���:��@BX{n�~v{��>� �G���;J���ǀ���D����Ūk�.�/؆g#8;��_� ��9'�w �E�Fz�b���S�S��b� 2-e�Qq3BQ�џ6����}�Ё};�Q���]^@��Tdž&��|�������&F�F�3��A̪��3�[�4#�j�?���@��K�}���v�rGT��;@V�*��R�ڼ��Q��P�`'s�"y���Bf�7�ײ�����*v�����u���ކ�MR�Y�����e� Ƨ�(upSHH%��׳Rx����+f����� ����q��Ɨ��V���r�=���Q�xrw:m 2�>�&�kx'T���2�p�{ ���$.���0�C����_\q�?�6Z�JB�yg�*�.!N�F�� x���<���O����*��{Ŧ��0/6�h�S%��M���;�Qٳ���Ԇr�)��s�'�����K��K;^S�bΣ��b�tr���Cn_X���C�i4����Z�=�v����x��9����e��`g�%���K��4f����X�+��H~�y�^���x�p���}���@5.�dX�Dz,�t"�A�=�dĤS6���D��X>�9�����~"��(�d� �����E�����#�����7�`�P�2|�g.�s�Ü)J���� ���e�ٚUt�a���P$���yC�v�c�.�ϊB��*IN� ����[���{��d��,�Y�+@w��~%Nj������n�Jp� �l偽_J���ʐ���(`Z-�K�� ���k���1p=����q�����oz|D7���k�`�l�f�ic��g)�\���_(xd�x#u.H6 �aR�#qR���w�Wo�b��^_;��@�h�m:�:a�`�2ї��r��2V�� ����iyG_Ǥߜ�jkI��&�ӏ��c1����Y������C:�����%\}��e �믷����n�� Ѯ��v���9_M��/�G?e���D�^�`ޢ+��p�����#]��@���\����j֥�S��R'��mn!�[�s�d|B1FR|������J�¦u��H�LA�K�\>"�(NHO^�K��_w��#ӵ��Q�md�h<���Jv�l��L�[�l+�x�ד�bPXiӱb�BY�gN���n?T:�Ha�����Z3�12��e��|��l��+�;�����@8��X���`��{�0�t��u&���NB�����DA1�lP�)���W^��M���6�#ƺ&�1��,>��*�nS�3��%-��ls�|���É��h�$-��DIӀ�'�[O�܊�`h�aP��V*k����p�����% ��-�<X�P��mܿ6�l�h�D鸴b=?�;�{���G�i6Fܢ�_=l������om�w\;Pc&��O�Θ�hat���te���yH�>��ϑ��rSr���M�*�*�J� �t��~J��7&�Ӱ�n��lgx-T��wY�ز@W� T�jЕ��N��a�{���\�[b5n G�`2�2�������-��`�9-
Static task
static1
Behavioral task
behavioral1
Sample
7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6.exe
Resource
win11-20240802-en
General
-
Target
7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6
-
Size
3.1MB
-
MD5
3fbf8e562fc9bd7e1aaee9cc8e0a46d6
-
SHA1
c905f30afdccc6d7a35ff94bc3312fd6aa699a86
-
SHA256
7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6
-
SHA512
799ee93198e9da8185b01bd9afbe75385212ea58ae4672fc3c7912af6db5d808c1866960ce900647ed0b72a7ad65cb408f00ccc163253d8304de4a5946cbd743
-
SSDEEP
98304:LHDgQwTph20Uef2xNfa7Xz7AeRspYup2:LsQwTph2xeONfSzDUYup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6
Files
-
7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE