G�'�{t>���]h?xal��HJ�,2Z����Y���<�����,�r�Fm�]��ߒ�/�� R5P�A���-�[X2�/jގ��u�����@B�T�9i���Z���1U)�A�Р��.�d���o��ExL@���C�MyJ%����������/�^~�P�/��.�2���� �oH�9��.���F�a�5�Hxg����k���������Y��~ʼ��8���aP����5���z(�-%.�C2�R�]`\��ͅ}#Ą^�)����cI{6�gXC��)nn�����,?�a�1?t��Hb�zHKJz���.0�Z���ώ��U�bˡ�kH�{�Z����]�:���]Ak��8(w��b!'��dT������Q�4�w�\ �� �7z�=!v�й�~�o Zy@le�Or?�5�3b 7��W�;h���Q���U���y��Ᶎ!��u72����}���P�<����$}!��;5a�9v����.���R���ˍAY�3&���L$'~�D�5.��(/d�ɥo*&x�5}��;ZX��0��jo��^���/�-�����~�$Λ�X�.� �`ƨTvk �L�q.�*��Z����#!���r�f"�����a�����L�F4L(,�I�xd�Q����=0�)B�l��]��C�I��u8�5;��#���3��n��e��i��Y���۸��<��-����h����e���,l��P��V~�����?_����²{�T�V=�DC����6�o,ޖ.,����ׯŷK�O�C9Δ���C��l�MU��6�R�IDѵ9@P�}V"b���8�u'��)�~�iO�%�i i�t&ztF��_#���L]7i0Ea�$�怾p���%�+\�P&z.�b�o���m���#.j������Մ7g��1��0�S��ޤ��8@�����7��0����9�;�`��Z�ʜS^�{�����B�[���.J�����%E��Iv�oeA���iV�G�RVl�|���G��.Pv3c��������Z�|[c ������T�l�D>��U�5t`��R�ͽ���������_W���ˇP�I���%w�4���5 �%'N�z�D�e>ᒶ��4�p�p@ ���IGY�U�������nL�(����$�.���V���|��B6P�>{�pHUWG��#C�"qT�Ot5}4��~�K*��u!��j!G��-0�d�]����rTo2C�3�>�k#�*��Av����?��j�+s � �@�~3����pK����jb�R���:$|#����.�iFJ��#qv7�R��S����x4)����S^�b�����ŊT��_'}��D��Bb�����I�E$�%��CTV�`��J;��5�x]G�"��s�jPw���g�#r z�J���h:���ׇ�U� �{(�&�n@�V��6�.}\��$VQ\r���R�5��ED���1��+��(���cՍ6��S�ūO}'Q��P 7ocm1�c�������(DžM؎��~ �!e�S*Z���-�k�����r��e��Q�< �l��_D�U3����S����w����= �'� V����ǖ�w��Mi^Р%��� �;h9�E�H+�F�5��Q��.���P�ZZ!-��{����6���j�\A��A��=^��!y�9��Gfnؤ@��=�`�܍����'cZ��B���5��Q�!��dQا�u�(���T��W�c���E>`����y�M(�g,g��V�6~�.�)א�;)a1&�^�lڲ�ӕ �I9:��k��:��a &~�&X���V�<����{���T�:�$����(��Ī0�<�>� O���k�l����-V)RA?9�����I��[�S�Q�J�c�m,H��糤}�ʼ��Fi�m�SO��t`h������!��z|�r��x5H˒r ��N7����Bnw� ���c���mN�@'��&�F� ��w0��pS]�v���?:������&V�g��#��s�X��K���1w�s�����c]�ѣ;���'�Z�oo���$s���rb��Y�j®�i0 i�O����n�ҧ�|�:�����$�R������̋��ݚ*#Z��p|�.t�y.��}]h#��X�[��X�d��R;�0g���RE�� X��d���P;���͠�]��[���F�>Te]�RT�_@ȅ��z��艑9hS��=x�ʒS����1y���ЖU����fg�9;�G-��`��n#`ש\A����j˰�0�K���Ѣ�ΦC����N�l�p�y�q�<0�pk�MU�7���r.(��ɻ%���̝�$".��m_�rD�n�1�-ڋ�����H�|{]wv�2M�f\e��m�����yNU�j�`��;�� {���]��YF��Z����L��hq+s�-�������=�� ���L�� K�2c��j@�c}��ra�Y���u�!�6�-5���o��j���?sf��P�E�8!L�*f��"��� 4�v���_�i_�.rP@�{�z��d���8��ԣVO�w������in���Xf)���R���73�{�I�'�i��zz���dsc�W�u�OU嵿r����k��;jz%\��ۍ�)�e8�-�@?����5�#�C���h>���{J]���k�aHk%jH"�G�xs�"ِ3u�����,�X}i��G�0l�8���C�jC#��,� p�����i����B�_h��8 �R�^y�z^yʭ#�Ε�4i��!Ѭ }�����F�Yk'���m��N� e���G��M��a�XfzVl �ď:X>q�%=E�����E冇:i@�FE��K�yhPE����^��T�q��hi{Ɛ�n�/�T�����>Ϊ�v�0�k|"i��㍤�`��a7��@L���P��P����� oS���Q��y$Ae��ސ;k��1�?�� Ȍ&�����J����o@⃒M���&�������a���N5�$nvpyt��+�lf���H&��r�wPE��x�
Static task
static1
Behavioral task
behavioral1
Sample
af0bc8defbeed5db4a60916fae60161c9a2345bedea4df3c53a3a7d8858219a6.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
af0bc8defbeed5db4a60916fae60161c9a2345bedea4df3c53a3a7d8858219a6.exe
Resource
win11-20240802-en
General
-
Target
af0bc8defbeed5db4a60916fae60161c9a2345bedea4df3c53a3a7d8858219a6
-
Size
3.1MB
-
MD5
1086df1c2ab84f65c1ed8628d86cae59
-
SHA1
5a3e33771c9a40b8fea44ab00dc24b9c3f8170b5
-
SHA256
af0bc8defbeed5db4a60916fae60161c9a2345bedea4df3c53a3a7d8858219a6
-
SHA512
ec51066c2cc58337077ae3e9aa678f44bb75efdeb9aef1f5f15e97d3f2955185cec8723fb110344a80ca03e9fa48a7a627cfc9d0e644632b1a09fd0d9b4a0812
-
SSDEEP
49152:ramuPv2Znj1Lab3cb/NkVeBPbuzyuUgbFw4cRqMY8HW4LccLMvM:ram2vG1LQs5kkBEpzbFwDRttHW4LPuM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af0bc8defbeed5db4a60916fae60161c9a2345bedea4df3c53a3a7d8858219a6
Files
-
af0bc8defbeed5db4a60916fae60161c9a2345bedea4df3c53a3a7d8858219a6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE