�L��'�9��+�9Dx9�M\u殮����)1���yY2{�ة8��x8�U�o��FzoF������إ�b��'.+)�8R�彡;�Q�s`���Ǽ��,�l�?~��,�~y�v{!~B�>^��M�!\�7y�q?�#'d�g��W�?��4��h5��������[�>Ĩxq6 2��{�Hq��� sX��.��x<rY`b�4rs*������N�8G�w�w��:�>�h����\��N(���u�q�Z�c�'3��,��)�1T�ii�Ƃ,L����3�ջ�M��D��S�9��e,O�&�i�|84*��כrb\���ml���[�5џ�e+�^���W���ڦ�u�&�$����k�\d�]��3�ڄ}�0�����]̭*���67�u���_�gJ�9�~3�n� �a�^�B=��{l�g��YF��:��=��i`E��&/��r���@�:�9�r�i9q�����D�H��lS� ���xXVdK�'Ӵِ4���wJ�������!��A�x̉�����]h�� >�L9[��D^��>]z��VkP�����qcsSܾ~��{ٲns��Y���w�4RؕLv�'�i��������sQ��L��a�XX���VY�2U_Y�O�M��7�����$j^aUvFsf�� ��_г�B��BH�<_. �W�Im��<!���B��~�V3��f5,�}o! ��A�Ak���Lx�^ҟf�2�x70��y�D�N=0��H}/i�sכms��� ��(LNޓ ����>��!`����[��4z�t�p#eg�蔒�BkŮB��c��ޙF������Ü}wd�M�e��j���bl�dA� !k�$���7���`�����⌺�8![3Ķ��u��f��YaS#�o�w����f���!&J㻢5�����O`�B�->{/I�2 1c}�����P����sA{5��@��%�����"�ih� ��(c�e��A�rG� �IYk��@T�a[mk�3U/k�+�{.8�����P�t�dC�,h��09�@�]��;'r�C~³�+G���.��N6���\���t����iQ�XhvY���f�˼���8��"m4����G�/�Ғ�/tE�\ ��^�ٞ�]����hs��ۋ-7��ۨ���X��/Vrj�CUW4�z�^ ������j�!i���ed����O6��V7���_{e�U�s���Z� �s ��XHpa<8�)��+T���9$tC�h��,cA�>�J�ә�.Iω�T1���q�����6�;x X����&+ $e��?^8�.2�мv����B�m��7��U[�F�ˠ˕��d@X��3��R���,��ױ`���Q��҂ �b�ǖ������;� ��O�u%�*�n�`zEZ5��嗬�T�$�2��>���UV:k5@�W-�XS����f���zpfA���xl�4�'کpU��&7�2�(!�4f�.A����/��]�Ҭ��]V�#/dM_�R�NsdCz�?�C�~�K T54� AK���H�����O��S��?@��z��b�i�+~�9�P'_�%�����C%h�RH��� �o�%�,Cc�a��j'F~�BG�< Ks(�&d�gk����1�����߳~�#Sm��)�������Xy>�Jߖ*dκ���+|f����N&�iZ�+ ��Bf���&߬��U3Qx�dy��������Tܝ�92��ޖ�z��Q#�|Y퇜� S��S��JTqҿ>qq-b��E�������r�0�C=P���` �B������:;XF��� ��y���y~C]��H���55�-?�6�s����o]���]�[�cWK�#luÐY��4�-�%��fV���#��-h������� ]�]�LdX�٫��؞֤��ܧ�"��j����qz"�z�3�%������ն{L Q|�Ä*�!T�[����疉h�A�������[9��ʀ�F� K�a��Y��܅ %�f��(�ܝ���V��XI��6���$8�X�������M$�E�]��?���@�����[�P��.���.9p���)A�gXb>��RCqV���q��X�2Nv�xػ� u�Yg�Ρ�����@߿:��w���>�j(/Q�p��K@.|��%�u��n[�P�:c��4s��}cG��.D]V��2}G��|��@r�4����x�t1&�C��4�,���r���g�B6F N�mI��<b����������>1�#��I"�^��r�{�,W)��2���+:BO<�.�/BqՂzdO۽�TY(����h+���072V#�Pr�.�����:���DfbSV�±�a�:I`����M���Q���[��?�ά@���YW%[�h&�~�ؽ�fw��#).׃�����5�TWݠl7Z[�s���NjV��D�����@�ڕQ`}ɔrp��A�UI���U���g�{J�NN�aS��/hQ�0�zh���2%"2�,,~�T,���E��ǜ=���-����/��.'$�Q5q���NZ����e�MF�_������-���>�� ��b���1>t�_'^�TȐ"�:�iJ����aqD@=e�z��ȓ�^�����6l�<����:�3�ӊ�v S%�r)��?�K#=�Xv�K{�$�6�w3�g������;������Q��X�=��x/i��*N1����2O�P)�KY��{�y/ M �$-��l4�:iC:&�ʾk���������o� ��_�A�N�s: P4m+�M���6��.q��>�,vFCeř+�9;7R�Vf1GFġN���c�}������l {a�Oj/q��ڣ\��h'u�Ɛ:0B�n��fY�Ķ��dc��кd^.�C�D-s :�������D9�0G����(�P���0��?�+\��F��eeJsqHLg�=�q�:2X����Wr���d�������w��_�\^��� WNi��k�@����(��K���4D�[cC���̅T����4o��Ș������[��V�~�+�8r�,G��:�:ԗ�q(л&��}S+CS�8E�����"|���Q;�����wW�v�y^�-}i|wy%�v��L[��%��`j�wf�L:����8��4�P���%h�r�9���1 @��f����� ּ@�~�R8���i��1���T� �r/��.(^��!L�s�����ov-H������o�B�I=�T. F�#���V���&PK�Qq3�!����4�ODj���K�A��~YF�K:��R�Xi�\���H�����:��o�)?LS���:S�����t�dw�DƐ^8m<�E���X�Q���s圂��A^��� ��3d����)l:�6ӫKXu6�dѸ0�f9��ڧ���N��q�S���(������� H�i��>�6��E��d�q��� ��\�:�?�{� ��L琬=���-�
Static task
static1
Behavioral task
behavioral1
Sample
9e43d4ee190e55f19249ff01a4c0c61147a959dffb61c3182cd552ee0115e953.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
9e43d4ee190e55f19249ff01a4c0c61147a959dffb61c3182cd552ee0115e953.exe
Resource
win11-20240802-en
General
-
Target
9e43d4ee190e55f19249ff01a4c0c61147a959dffb61c3182cd552ee0115e953
-
Size
3.1MB
-
MD5
bb142802bb81964a89a2a212ad31e280
-
SHA1
9959d6116ae512de5efc4fa0eb8c362c95212ce8
-
SHA256
9e43d4ee190e55f19249ff01a4c0c61147a959dffb61c3182cd552ee0115e953
-
SHA512
c85e33c1653f6ceb41a42b1ece6d4e3fc3efe3a91c9f8b7a0e53bffe8b04dfb66f19d862e6a3650f4f229074bb934eaae64ea1611fe23206763a3a6929880961
-
SSDEEP
49152:ebY9YeJ/IALK0P9VMTDD9HmzvfeSaemf9LmWtf3rTv9dK7/yiqlfHg3Y0Vm:z9Lio7M3D9HYfVYVHu7/yLg3Y0V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e43d4ee190e55f19249ff01a4c0c61147a959dffb61c3182cd552ee0115e953
Files
-
9e43d4ee190e55f19249ff01a4c0c61147a959dffb61c3182cd552ee0115e953.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE