hy��D� @�J@��z+��~FB!�XS�$������$/6��yx�K�i�ɖ���N:d�N�&��+3�8�o��?�Oa�����;�t�� ���I���1�;���O���/u> �����I}<�\���b���΄yn���»���~ ���ǒ;͔��C� ������jp梤@�����`�A���RS����9�+wD!bXƩX�0�����/VD�����Ʊ�b���ud�����R�\xJ���A��O�8ݫ���Ybs[�T�)�2��b%���������Q�~%���|\Ϊw�!&�ϔ�����G���"\)`+.�w�4Q��h0k��qMB�Ř�{�l��v�b� He 5��-�^��$��'���y>'+f��2� ��Jk�q�+*�G#ŧ��_�S��K� 8��e��y}E�| �}1���ط�����o̓~���z�j�C��H[��ˆ�h�����͎��Ud��1���U�3e����^�4�zy�b�`���N���M:�"D��Lm�#? �9'���=B����V ��J~cmᠽ+��$�>fs �y-Sq��kt��G��rN~- �ƻՒ��~�~)60���~oD*���g�8<jb�~�ڐx�c�z)n˜V�A��O�z�F7�5�t��Ǐ{ ��ӏ�����6f7�8��<��'�P��2�j� 8\�b��+Z��$8"^������J�˿���} �J�� � 5㵦�*�#�.�Oo�r�U;�-5r�Q�g42Z��s� ��# c�'��}�p���f���?UE( �ٌ��ZS_��b�Y�J�)w�a7b���P�'�)�"n�t#n������?xL|�AW�l��U!�A�a7jY�H�C��^k�F�1�?{��"��M��R�3eul0���4;M����E�b�ߐbj4,�q�9xa��g�\K!�g�5���bwcѴ��P�P�v�>�ȗ�\�G(���;�ƈ��>�� �V��CzvL9��d��.����rl��Տ��G�em���`�&eWh�ˀ�=H�0��m���z��Y/)�GF])^�5�9�yzҹIEӮO�~$ B��)��`��*(у{�|��[?�d��K�HL #�+'>Y���'��!�9)�8����z|�F����M�F(�l�C����_2�f�Tt�D�����di�A4.�6R������=�͖�[xB��&�"o'�ˤa1�s�<�A��.���sIϼc=�y'P���_������vv�֦�,_B����Ȍ��߶�:p¸��L��e�`ʓ����S����k�w�h�S�-�ӂ�X�c��ɥ��ـZ�.�~�Y�'c�Rj���.�`�+s����I'��_������AxQ�k$Gh���P����b�aOVR�����^$PJ�.��B�ni�f�/��Ɲ�9���#g{�Xh���B��N�2Ka qk6�ʶ]�=�T����T'�w�����r2E�� �I� T%�"H�m��،������t�����M;��B�д2�3E�>AT?0+<*4������$$'����������A��y6�2�Q�ZĘq�� ����X�^tv���K>�B�0�x��n����2���êa�B��W��ޢ����Ú+<`�̎�w9G�S�*5=تP������W��-����qi����/�/�>���� '6��y0}s@�O�_��> aJ5�4@����g��L�!R�`0�m0�*/Hcr��p���0��� ��4]<����Ҵ���B��R~#/��dž�?�<+Cy��`E��{����::lB#��~R+N�!n�Ok�:�S����*�3u�W�?��x� �`ʳc�u�u�����g�����Ro/u�T@�Pt�/�CBֲ����e=GDe��Z��|mo�A��6AU��x����r�_���e{>�AR�jrh�5���ۋx�z�NIM;��ȋ���^ "� Y�o�0��ح_��y�����<����R��5�x��mB�.�-�����,L\La" 7�Ԇ����5�e����0�d2c�T�"ۑ�J���K!����pi �O&�1��N=��!۱�A��Je��^^�QT��g'g�r���;���Ҵ��$����sW��'�/0��⣹����J��"���|���]WF��<1��JP9�߈V���K,NIM�����V ����մ]Z� $�:�$t�Z��꾰�z��;�ք\ւ���� ��D��ӝ�i�<#xˇn.��`�\xm}|y&�Yκz��h�)T�B9���:d�n��Z�5g�q|Ls��U�+(�jU�(��~��H�&a"�r�i�e���J"v�~��^ ���<�ۛ����g/t='P{U���3������hB�gዛ��'kH�.|qA�)~��Y���ecj�/���k���Q�^���,|ܑ�G��q!;��yw�̤N�KK1�������Fù]',��'כPHlg�L�3�{ -�����?����� �7�-m�wчQ��L.F�f"_��i�������I�Q�v�_D���p)��*��$�Ȫ�Ci:y��bp�����j2��)��ؠ�O�q��ڧRm,)��0�;�����]��[ е���7v��vCT��UwA��������J�cא��Ӡ���UPt�t��r>o�ഝ�!~�5�����l1��<T��0ϒ^��=�P�Jh�&z�a�rE�=&j��s\���e?����{����c]|��-�X��!�H���RF�N��C��{�> ���H����e[������!��饲���͑*�h�>��_*���������)9�6y�M�B�A�6��W��G��\1�T>ej�U�ͨf�xz��Y%h�u �-�O�����gb�g�5Z Z�ё�ArP��&�+����`��i!��J6HR�%ˏ� ��ކ�i�0{`�&���b�MQ㩢I��G�"Q��«AEoV�i#���2���&o{��uE��]��_�I�Ѝ˙び<ˢx�}c01�Ӿ���G�Y���\UJ�[X��-�y���&h�ls��9��1�ϔ~�ѓ��\Tg���#G8�B�P��ۘڙ��0<�J+�q�d ����(9Vx��<��+&�X'!Q7&#^(Փ|�@�DnO�}���?�Kc�,*=��Qh����~�2��|Z����������j��
Static task
static1
Behavioral task
behavioral1
Sample
b161156e1f92ae1eab13a43b689faa09987ca40ec8ac9bc930fcc4415896b1dd.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
b161156e1f92ae1eab13a43b689faa09987ca40ec8ac9bc930fcc4415896b1dd.exe
Resource
win11-20240802-en
General
-
Target
b161156e1f92ae1eab13a43b689faa09987ca40ec8ac9bc930fcc4415896b1dd
-
Size
3.1MB
-
MD5
a0a7a6c5a499d7eef4c1f14bcc954394
-
SHA1
e01a626233ce502f8e320c5835ec4615b7fc0b74
-
SHA256
b161156e1f92ae1eab13a43b689faa09987ca40ec8ac9bc930fcc4415896b1dd
-
SHA512
ff5096467c5a561dd9df5fd5347009f851f9e2eb9dc2d95e8da7f1e5cd152a67ab333b13691a249f2c6e7b8fc23c749229219d5cdb950bc0c15d97a5af73d60e
-
SSDEEP
98304:IfX/Cn+kHm23oRTYLf0zxV7s4WI1CN8EWi:2nLwAjCyEn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b161156e1f92ae1eab13a43b689faa09987ca40ec8ac9bc930fcc4415896b1dd
Files
-
b161156e1f92ae1eab13a43b689faa09987ca40ec8ac9bc930fcc4415896b1dd.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE