�bC��ǯ'i&M�/��⨦/Ij��bi�i;[ �����Ȗ�:��q�wt��%5����K�k��}�G�o��z��'�C������_ѹ)p.gQ��x�q8��b���� ����q�b�z�{$��oa�v� {7�~M�����7���H��K\����8$��1�W�����?b� w��>�`s���� �h�&.��"T1f6s.����T�^����u�e�ؖ)Ә��8�xG�I��b�=b�&D1ϟ��a��d�dK��� %��eL)S�GU�t��Zt�~l?Zl��'����L�[Si����'V�2��5���Z�n0�֬�J�"�l�&��%���_�t��k:9��V�s�*X��Nh%V��Q(��\O{)����65 rKϥ�Do�a/'�첲���V��� C}���-�͜���*���y'��_/��l��+�~Х`�`�*X���؋��k˕�y'!,-3�d�Jh�I����%�:Q���p�H�*�4����G�'������8q\P�л��CUL9��ǚ������N�E{w?>N}��%��c<t�B�Ź���+%�cP ����!���祝@���aA|��UR)�0�\�����PdK�����u��ސ`Z��LN�2��"�mdz�������;@n�_��e1�$R���$��<a�#��X��;."�c��ؗ�������>��j�6r����\��\��O�_���&*J~`�݆6i�q�+����� M�c��r4�.��3�.M�����)2�;�`��&\ �5(�#���m�w��0��݈�nϲ��T �7�(��Q`F�5��q����_����E{G?:J��n WYVگK�=�<�9�z Z*y�� ����V�.x E����ߏ���~{�����xr��x��֛r��u�&10$�~,X��U۔zenI����Y"�� �|���Ў�aqdwT��!�.y_$��N��@ӱ����EF���K0:p�^.w����O���G����%ճ4'�65Z �T���#�؛#�/Z!��Z؈�x?��g��f$@��SaG�f��0#6x�����f��Ձ[��Y��}Yo�_�n��\~�*��,*o��mp5<��&��`�� k���Jj��YFv)_J��v:�Sɚc���m���)�͋)[�F�'�|\��A��'<"���<�)�#����@�Pք�j�d/�J"� ���v�������������)G��g�Q�︍ȣ�K�[�#���mkB���cGh\�a9�����̶!����Y tpf7e"�Iҗ�^S;�1$�źf�yJ��n�@�m�1��j%�������ԝ��4)\:$?�4ntT]�1p=R��s�����Vb��4�k�"�5���`�.��)������S�v>ǘFjq��U�K���ם�g�l����J�)nݡl�(���E�.f���.DC��+T*BT)Ng��Z0�)�t�|F.�$�I�>$��Ӳ�zy'��A*.��sF<����e�~P�(篢#t��i���z��v<=������ b�^-c�\R��L�$�?�R���O)n}���74Kp���M&by�F���L�y7�5N�;Dk�$ ��˘R3_�@ /e��q3O������%�욃V�c���t��U�d��냅ߚX+��Tq��u��q�J�YV��{>�de��@�U7���z+��i�� �^�s�}l�ؙ"��9w�]C����͎�Vf��ڿ��牙U�d���=�٫k��G���ocM} ������U�� H���[c�lyimA�PQ����u#DTոo4?�-5D�!r���ѭ�V�����b#-7K��W�|�~�N4h1F.^�>�`�HcGX�*��V*����D��Xp�D;�C�c�GTϬ�ѯ�$���<"����Z,~��5��n�C�AX�i��=���>�Q:/D�ϸu�Ḁo�,��ȷ�|8~=pU�����+�d�U3q_��nk2�^DG��:L�Nm�x����ȭ+mx3��Q�^����b2i�,""�O�̛�S�g�9��2(�?���c�"���4N��ѓI&b��`�Y�K��ꭷ\/���"l\�hN-W�*��cl+(J?���T�����;��r �~�hH| �"�lu- �5a������ȳ�R|���K�r�z�<����Mه�xa5vD����{�~��eպa���0��p���lՎ^�J�+�Ks��3+�7��9r�3"�����Ӿ�\�td�BwƮ��"��,�8�'0��a�y�Բ� 6�ZԒ ��(�U���!���{�GF|͖�2�{�,Tm ��@��5�;����I9��1o���&�e7��#B�ƃ��;k&f�PN����!L}�n���(�e�P����$t����m!C�>Ǘ���A���Ę���E�n ��ޱ� �w"EJ�g�̔T9�jS�ػ�QnbV�y��v�0�Ub >�����I:� M�)p���?�}���E�6?����Tou:��.��齾�ǹJ1\��1��8�.�I;�K����c���vp#Jq�T?�z�f�Pl�U��=�d�r ڣ��*�!�L��}����K-C=�T&����1~)�J�c�5ַ��� �a�/j��F�곺�r�����Jy�l鬣~2��^���QO8��?��1�фD*���Ρa��fɧ�����F��e֮�!�ExP���+�V�.[M(BO�hh�Y�kባzf�_5Ԅ��\�S0 �H���R�I��.�P���A;��v�R���}��H�ų�ޡbz�7uW�J�~~�o������f��/|~ꏭx�2N�7+�o�3c��6)A$�Ў�9W�˨g�\� ���"��J�s�M1@:����Z�G5�~�.�X�V�[�x���r$R��4��&��3��SUr�OF$t4M���Y �����m���,Ӫh)2o�������!�\�x9�dZJ��;���y��C4�E���F�zӼ�e��0�F�|��`�RlK�����G2r����oI{=��+����b��1��+˷J�=�?+�c� �{���w�������H��j�Xk���f*=w����<�d)9��Q�hQn�a�- T�!F��9Z��*lG�`�����(�;9����8���s6[�}u�_�B�?�qv-�WfW@ l��Q���k�ɩ�h¿��ϔ���^��� 3j���}_̺g!,����:XE����S����x;w�/�]h��1u�sE���u��E������}2�2Z�Dx�|+j��`Nm�7U��vJ�/�(��4�+x9�߇�0�4�p�9�M%��`^K�A��Wy4�m���v_x������DM���m�61)�-�l��?�6 ��ZbcgÓ(a����.���8 ?T��t �nP�#�S��z{i �P�XN��I�Qs7��LG���c�U�-�t?��<yQ�Mޗ�F��>5?�/��
Static task
static1
Behavioral task
behavioral1
Sample
e82c9325464276eb6d1889010461d92a89f3b2bf9ee9dee5ccc904ff8b62b205.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
e82c9325464276eb6d1889010461d92a89f3b2bf9ee9dee5ccc904ff8b62b205.exe
Resource
win11-20240802-en
General
-
Target
e82c9325464276eb6d1889010461d92a89f3b2bf9ee9dee5ccc904ff8b62b205
-
Size
3.1MB
-
MD5
b250cf0735cf6897a27c57d26a253639
-
SHA1
8e981eecf8e728536d574a338aca52dbb2218bd1
-
SHA256
e82c9325464276eb6d1889010461d92a89f3b2bf9ee9dee5ccc904ff8b62b205
-
SHA512
fcc7b2fdfcab8280fab69a1c4717191de5b46364262a3427965d57cbadb538c3b2ea081c3434e2b34d2b04a73ca89963e10950ed56505901f5f1ec69ce938f00
-
SSDEEP
49152:MWw/R13O5FDkkSjlJCd6ilqyOZ6KuU/6TrPsERWfaXfR:sJ1sSl4Blqy1vrJZX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e82c9325464276eb6d1889010461d92a89f3b2bf9ee9dee5ccc904ff8b62b205
Files
-
e82c9325464276eb6d1889010461d92a89f3b2bf9ee9dee5ccc904ff8b62b205.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE