U)Jx��&%־�����;8��Z��8<J�ޠ;��h�����K� ���^a?�z��ĆŇ�6u�����#���/�,{�����>�j��n�� �b�N81M��S�/���Fl��T�TmL�sHRyܲ:k1��J~���\�d8�"��4�{����e�58Ƙ�cY��E[8�6$.qS]����G��So���g\Mu�*�BMq,C�h|D��X���8��ui��|z⪎ �p����{v��ĆE�}�u�C[��$ҧ�X�ԎV���D��xb���5^�0�<^ ر�X®9J~v�xXT�o�V��%��X��3���\�6[�G��<���ab��2VE}��4D�v|�%��W�D'lNj�&���sl�Q�[{�@��z3�������c�+<Ǚ��,��@V� ,z<�Z6��(^���0mc�i[M1��W7�;\Vx�k��������r�|��� ���<ܙ��뎰qk�P>'���ԟ�;?�Ǵ���)GsP�ښ��TL�[���=6O���ѫ��l&M�3WQ�y-pZRY�i^)�Eo� ���8��,�5��_d�]��GA�� 0��7 �H�6]����gۉ�Xx�������(��6Ql��ј�G�|icf�n��% ꡥā��u���Kj���7�6aԈ9�;����U�M�ddȱ ���V�q�P0�M ��@ǔ;:Cj�����-f�|X�j}Rbe�-M���d�W}�N5(kc�V���3���:$��ZɹrA�,5�Ӹ�Ԩ�C����^��`Z���4�M�P�P�<BYs��p��������r�u�h�r�ǔ�ծα��&�E*��YI/�&��&� �����L.��r�Q���-2?uI�fu�i���z���3A�ͦ�Jg_xЮ��d3۾�F\L��R�l�4�ڤ5��s��9�rD��+��%aXş:��Nwʻ=�� �©��/��(�âV�Η}u������tY\�"��COԮi��f�vP������+&��D�t7G;SbY�y=9/n��`�U�J73�BK����(��|�Z�n�my�bW<b���>��kA�۲�C6vS1Z��5���UcOA��T���RR�T���h����fWh-��{v�Nc@nj]��$-����<����4<��Y<M�y�R[�T@/f��I�w�t\!r���;z���Q��ϐ����c�y~��m!հ"�8(�rL�����:��Q3����nLe��Nzg�i�_��x�wEՅuI}vp�!�z *��� ~p=`_��D���J���=�IU��aIv�œGA�U~���cU;]�:�9�З�;��@���+��H��UmGUz�{K)M]��|�J�<�W�~���Ʒ�x��H�$����I���F����4K|J�юd��EE�3����4���N"^hNvN�AD!�f���.k�r�6x��㸧z�)�H#B%���h4�3�$��l1��]9�_�*�Z>��X �����rU�>�?d�~�3���v�zR�����Ի?��c���l1�������@� �+y����+¦W��NHA'��Ee@15>m��Ϝ4���5��ޖ �8�s�`d4F�<]1\�p��GS�S���6i*y�' ���S��A>�ߨ(��GI^�%�8�)�����: ���@A$ �{Nk��������$:u�fW�[�&Osp0�A�UA�2?Aʆ]<���fizƆE�>��%`�>��l��1�L.�����E��[����箊Ӛ�x���g���K�zL�2�6D�Lw�$ל��B������ y��u6��!Z�yK�p� y�S���U~U��sCtT��D�Lz �\���F V&�0������Ciu��5Q'3��,�R�Lk�FF��L���C��U�<��s��^w �R[��(�#��!�Z�.rVՎ�f>�����B�3����cjdo�����A�B�r�7�~�z��ߓ@�^��n�~4���͐(��)M����c3�AL����k��k�{,�v;��DZ���5����u�6_{j��6Qt��CÿY�e�$S��������W�]߆�:�g��ъ������Y������X�����������������g��Elۏ���"������4�I\��ސzO��1x����F_�4f���Pˑ��9���0�}9Үm�nk���7m4FZ��?N��B�k�����S�EPeol�h�o�af�V�ۚ���3�������T6�4���4�,�|�a�+��"�F|t��A,�_��}�%�,S��W�7��B�Gcgo�x��Vt�-Y./>2������ &��o` �Z����㫊 �廩�8i'b����܈G-ē�?�V�-�\h`�PHƔ�%�p�"NԴtM* �<��o\r��r�������:�����5�m�u2U1$�|\/Uts-�<�垪oﲌ�i=�ė��O��r�5~�|�����7��8��l��N?�_ �� ?0�^���Rs����V�.44��e8a�.�>�WLC�'��C3<�@D� �>ި��f��fs9����� ����(�!�4 �� ����*\��R^���%6|f1�[��2�pR'��P2���f�_�8/�*�ab��`x��Q�S��!H��#��TE���|v�S���T��,�FR�y��8�9���Q��gw7���oo�O����q�Ak%��Av�I,���f��J��~ pFO��H�l"����l����$F��i\���?S�!I��ˋ�s(�1�q=�!���~<ay�$�t�� �]���G��F5٢�=���N�G���������Ċ�I=�t�&>J�U�����qk��:������.�(���E�a9A��F�@���%��3C�w�k= ��R9�r���0�"�:����K�=c+6TR�e�?����<��3�O���]a̢���H�8)�6m�'X�Qi����{�X��/t��蒦\Q��]��If���Mw+��h�b�5/�� <Ca~��B�6P�f{͖L������w� n�Hu��G#��h��c��U" ڶ���ܭ��;�x�dĉ��b�;���g�3�k(�c�]�yF��_E���~�v�ӛ\��g��8��D����3V6`vZܒ絫ޏ���j�%���5"H�rLȄ���?Ha��-���T�Kc +?+��#@Q1�Z0��,M�^���qnx����J%��{�.����MO8V�f5�"�\�q�\��[:����<�!2���0��^��m�Q_����P�cv����*��6'�f95�W��#���� kC�jv�����P�@�������!0�\��)�;�?���* ��T�)kǘ��S�������hJC�\�'}��(��h\C��/� g�U�%����8<��X����asx@!��,�;� Ao��� _�J�.ni��b����&�J����rO���S�����I�#��൹�uT;,�q�/�f�N�Rw1��:L����v���Ώ5��8�\6�j�q�9�J`q ����Z�2���$Fw�jP�ZMwyħ(���G��T��X_1�z꾭�^�[9q��x�nC�{������%��X>��η��i"<C��j���[6��A���B ���Q�g��^��Z%�{S,������)��@�qj?�`Bm{3�� �D+
Static task
static1
Behavioral task
behavioral1
Sample
19d9b2c83fa698e68521d93c81a90146ef6f3d49c43e55694abf87e52480695b.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
19d9b2c83fa698e68521d93c81a90146ef6f3d49c43e55694abf87e52480695b.exe
Resource
win11-20240802-en
General
-
Target
19d9b2c83fa698e68521d93c81a90146ef6f3d49c43e55694abf87e52480695b
-
Size
3.1MB
-
MD5
3258702182cad12230e21366dacceaf0
-
SHA1
5837e699118efe9e657d3e171d360e339762691b
-
SHA256
19d9b2c83fa698e68521d93c81a90146ef6f3d49c43e55694abf87e52480695b
-
SHA512
e46a1a03c070881a7f07ceacf7d733bdfdeead7e65b88a18a59b9bd94181e22aea6e2c74844b0dd2edea56278701eb9bda2f05a20ccc01618ac28937fe0785d9
-
SSDEEP
49152:cZqnJVaK2vlsoYV5GIlUp2C2VkWHMz3/4bDFiNDx9m4IsCxtDKT1ImMV7:OqVaK2vlshqsHMz3+hiNnm4ZCvW7MV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d9b2c83fa698e68521d93c81a90146ef6f3d49c43e55694abf87e52480695b
Files
-
19d9b2c83fa698e68521d93c81a90146ef6f3d49c43e55694abf87e52480695b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE