t�p�> 69������x��Z<�Bqc����~��r'�6�T����bE��Դ������NU#c���@Jp��b!`���W1h��S7�����1$B ��T>1��G0#*��� �X���k�bt�8��E�����gTw�w�!�"�3�\��u���1���T�1�'�u[D���ѩR{��ʹuK@S{�{����8�4�P/r�i���"�� �L�;�� C��p�yR�c�&�#l ^��@��d������/=�2�1Ұȣ�t(��-Uf�6��|J�����v�Sp�(Nʤ������V��AH�?E��]�쥋2������r�j�� ��-4MV8.3�����3<�qɷ����3��ڧ�����9��yCJ#|�.I ���=���a�p����,Z����'��?�#ђ�d����4�����;9M����w@;�O�.�u�^�"m��$4�#�=��L����`5�Ъ�>W�ڳ[)U��T�m �W��r���^��~:h`@������7v� �+$%QR�����a�ԛ䐟��+P��i�A����5:�R�_�W6�R������Q�L�����X�@,�1h��J�ܖ��n�뒰D ��^A��u54�{1�=]���sd�k�9�+��vT,ńG�͡�c"F[w���<���U#��a��n��XUC�Ӯ�WO�<��<� ���=\v|�83�V���;#*����v>�����v�uJ_Mm������L�/ΊB�4���a_0w��yZ��CxKR�,�?���� :�i��O� N���1��|� �d�̖�\��3�$e���� ��ߋ)^��t9d� ����S���;�+_b�Eo\gǗ��F��/�V��b�����8���a?�Q~�?%)g!jLd=��H�]��Z6.�SuR`۷��gNK�u鸞d��gK�$��PbKv��~�Q��O�6�0�P����7wnҝE��x!n�Mbv�Y� U���M���f�i]��K����q��b��׳�e]0!�0�x�,����I}�ś�A�-�d���d���}�����5��w;����᪷.{� �5��i_���O<���g��h�����a}\蚁6��U�[i�%n�L����^�֯���6)*�#��P��}A��k��ͻ;�#I���0��R�V��k8��Nk@��_�l���w��L�����(���뵫t�N('''�k8ଣ}H�lkQ�n�����?��|)5��y1y�4Ͷy&�B�,����U��:_~��C��6q߳�`rY!U�1V�8Dn���%�E�س΄H'"�@�%�>:Q��p�B*Ȭ�q�m�i\��g�H�������\�Y��ه\g·��M�~`}\G���K�K%���w���Fr�"�߄ �8�l\B\���"�B��Tp�����f�2����nn��.RS�{�XЭ��kt���^ƻ��U�xPْj^Bn��1d�N���l���uW!��U�OWZ>�RZ��+��06tF~:�]c���������w��Ο�V�2�M�W��`�9��I�w�v��vq�w�q���R3p����� G�g���_�9�Y��R���e�t����3���<�$�'���i��I����2������ �T�0���9�Q#�yQ��+��._e������~��@G�K�^������r�M����`ಹ]Q5fyk���J��k��� ����]5�vW�������!=>�;�o9�����`����0G��E��'�$_S�I��n�G����^���v������ ��qӛ �w��I~}�~H2!)3Y��J̅ t��c����7Z�=����.����I��n>DC�ܘ`��"�A[����̭<�b�n>x����R�@��7�JӇCEN1�����`/�X�I�\[y�� ���`�%Cʞ�>쇾^).� ����K���#_2 ���(:�GS'��٣zZF(����� �:� ��Q��m�9� "O��Z��j�P���ȋ�8?x�P�e�-��2!%��J�������˹��A��q3��:��}�N����v�u��N`vmd��A�4X�Dn o��b��o�Dv�E ��G�uȃϊkx�R��_��˓t$��.���J�p�b�������ڲz�WJ��$H$yI=���["{�b%��4UN0 ��6�/�k�5����Я�<�}�n�_1�(�r�����ō�r!6֏ ��Ev��~���H������%>����G����0j����&/�J���`�~�~Ȏ�/��Ŭ.5�}`����H�nc��b�#r��s�/o���6<���F/���#�yM�}?s��@0���1&^g6���K�NjH"Q�QR���,˔H�q]�=`�M-"J�E��� ]�9�7���㊈7�.��Ks<��,��<T�F��Ч1�H>_� ��M;�O������3絾�Y�9xޔ<`�L�Z�/"l����Ǔ�� �+��X�0���r:���������]iW/A���*���@ʢ�xC��A8x����E�R�������<���^��i��T��?����P���$���S$�Wl�aLۢ#�k�/$���\:l��4^�h\KR��?V�$�4�M����{�y6Ӹ0|��`��1��D�o¢�˰�8�j��`"�j.1��mI��B�I� ���D�";��ZßˁƦIX;�������ճN����T.���t�~�ps��d���ʳd���R�5��J��-�k2%��ղ����v��9|�vM>�Nt���r<Q%����Z� �ֿ�`�'�[m@OJ2qyt>S�X��+U�u���t�u�h,���G������J ��3:"<K��R]���ÝP)�����,��( �&6��� >YM�d���Q����<{�F�QJ_�.r7a(X�� &W�a�Gݥ���D�B[��9[���;�@�]31��T�' �7!�"*�@"�>�KW�v�s�.��O~g������� v;*�։�c���T$�E��O���pLc�"��d�T���@ �G� �����GK2h�#�<h��?q��,:�Ǜi̜��#�z��/��8���TPE�x:�@�/p��GA��B�l�uJ|@Iڨ�y�;I��z�^���N�%�q8���5It��}D��z1��\\)�FU��ё�%��|�c�� 7�t9����=0� �F�E]e� &!���d�7��lW�Ӣ���z��c�x2�eҜt���؏%=ye�a~$���'�k��!��4��L ��M ���|9�Sߚ�����(_�@�(�9�D��7��G�
Static task
static1
Behavioral task
behavioral1
Sample
a415003ecdc8a797e5550d514363c7c3d12784b7372477f59e8d30d14c52e389.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
a415003ecdc8a797e5550d514363c7c3d12784b7372477f59e8d30d14c52e389.exe
Resource
win11-20240802-en
General
-
Target
a415003ecdc8a797e5550d514363c7c3d12784b7372477f59e8d30d14c52e389
-
Size
3.1MB
-
MD5
a1ba41827fe41ed12201933d4d795f27
-
SHA1
397ab4664562617c0971ee95243814175b868140
-
SHA256
a415003ecdc8a797e5550d514363c7c3d12784b7372477f59e8d30d14c52e389
-
SHA512
9d10e6332ef00944440fa047d4c8110fb298d12f89bf23956a6c527838ef8338f8a468566e8db001c994bb3e91bf6133f8dbf709504fb38aed535a66e47a4f3b
-
SSDEEP
49152:NPZXnyGyfbeHacewRLFOWip4+NIkLNKuZx2fEJATS1pJOnEF2BPRmNmdry:NPZXpyfw12WipsqaEJZ1zjF2BLdr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a415003ecdc8a797e5550d514363c7c3d12784b7372477f59e8d30d14c52e389
Files
-
a415003ecdc8a797e5550d514363c7c3d12784b7372477f59e8d30d14c52e389.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE