���;���#��]���㉤�}��Y0� ��V�)'���G �.h��L������J�%�y�Ψ �^����4�S5C��3��mG�[�C C;�}�@����2����J0F���5���=;� �]k�#w���lr�n}sQ.��EF˽�݄J�,h�Ґ�C�ެxk`�p��9�Eg��0�s����v]]���J�S�ZS�'&u}z�v�r��<j�g�kL~bep"�A/ |)y��s�{��c&�o�[p�պ��"}8`ƽ��X��ZM`��8}oZz��m�k����!���;���$���&t��FPʐ�N��u����?̌]E2�k�E��w�d�)^ 1,�&#>�Y��>a�p� ��y��]S*�@��#ݹC.���0��NO�����U�Lf��ĝ5�$|��&�&7�R����%�Q�t53G:�����7���^����Ie՜?ʨU'ǎ�^���̽T��F:|S`��pʐ5Dƨ[3���#� ���A�<�|_����b�cz��\!��d�;!W�@�(�k�H.�������Y5q\8M$'����F�x��F�|}&��J@��A�\r�G� �i��l[e�DR"����[RBn ���9�^LP�Q�h�9���ZWax�v��tt��l,��U�*N���*���K�05B�)�:����hk�D&�%�W��~Y ���t�7��I���t�n��v�����$��nǍm9-����0�)#��#w^!i�<�M����]�O>c�p�_Z�!]��M�^^~�KU��|б�륇������;��Ѭ�6��*��1k?K�l��ϛ��6b���>ݐ��m�l@���х1�ЎN@���.lUA3Ĩ�(�K][� ��BM��)�Y��BQ�DE��Ϳ����\�2DY����"�3=~���^�R;a�q�:��X��n,��F@�+����M� �d`��i���4-3Ѳ����eoT$CMF�"Ry���I�#��6>Ѐ�����^�Aí�Mjޕ���/$�}�4 �5���ȿ��ʹ��04���Q���o�3T� W�(�}xt���eG��Q�)�G^����0����E��H�gfw2x$��N�0+�%�^*��t��2�^�R�}H��aM�X)������ſ�\ؾP��4Ԫ&�`;�!M5W@f�+�J�H����o�*���b�ʁq&���"0�Q��ؐ�>:Z����0l�h�q�!ܨT���B�=�8� �>C$p��EB(��:尯eU�T�����q�Mu*�nV���Z����u2�<GH�����\�1\E�����%9N�^��p`ή��ƛ�v��C�R��Z-���c���o�Q�s�`z�ف��� 3ܜ�Qe��45Pp�9��3��;Xe�⎪���(�Gp���+�o'�h����ʂ��+����J#��&�)��J33�"k���J����4<:۲�^����^��>;,>�����q�� �}��t�K�ٔ���nڲ�]�7��O���7�[���`X�@ ��^�L�b�qԨ�����@�H��b�!_e��qK��gE�n�n�����j&���yN�Xu!��+�$���9��r,v�XX0mRv�U��j;�@y���\$�$�*l6��A�#z��3Q�Md����mKY��2�v�Ĕ��st9)1ۖ�߳[�Z������i��Z���=6@�Ԉ��yB�9"�2g����f5>b�*�L��>1j�`-�b�t�Z�9������Zc�(�ܝ�#�S�쏠���o8�,y���i�?����9���]O$(r~�EԿ �'$�>��͌Z:=�1�N�9��6l��ce@7����bˡ'_�Ӱ����;�i1��D@Z�sM�x�w�qj�r��d�?��P��5�U(������"����[T���a=~�~?ej��ڱ )���)�2_7���d�w|��M�ou� �~����^x��bs�\�U�LW,vC��ε��~��_��KlJT,��H6FV/�e��dřC�B/��("~Bļ�7j?����|� ���^!��`撝0P?��i�y�<���'i�@�tǕvg0M��]j��Z;T��\���W�)�"����EAf�+Sd��� 3ൣ��v�FV�T��0�[���L��©�0�����q�Q�����(�N��i^H"x��Y_��EH�|� ��p!�Ӳ�c��ω�D#�^�H�;�9&Oo���T'C6�]e6�a�� �)�љ��S�z�r�qj9F�c������S��!$i���05Ȋ�<UmC��5���^'�� �Hz����"�HhB���wl��5�]'�(k��6�������r��S��7�P�cPf��B���V#��U·��%Ѕ`��3*�=i;&N���H�,�\}�����KC(�ii�_���Z7�Z�3���V)���4,]�D[b�60_{��H�������3�A�0҆���6�P�l��-���|=���H�@\��w��X���?\���^u$��^1@��f������C���?�Y��,�)�-z�v��Cˀ��v�����)�ή�2� �g�&���b+5x�x��t���O���p��X%��<0������.�G�W�n���SI�=��ć�O����S���bO�ρ�#v� �~�FVq�x���\�6(#�-��j�P��`U�,Y����D��.a���4���g�1���g{ٚ��[�n��IoM/E�6YȰV��9�p�|����KV�=DKѸz J�Ss�*��'��Q��Ҡw�8�Eo�`�-���wσ!˛�$�1����\_��R�dղ;�����zǃ�_E���kހ�ƻ1OH���T����Ǯ�q�RI�J��Uh�z�Ƃ��u�>)���-��ݐzi�M�o �"��w����)7���H�pm�M?B�v���4�*%ό�q�m�`�'���F3އ���9�t�U�4X��D�Z�*��;�l�v<aZ�WBv�≕D�,�h��j�?�%N+Ԅ�n%���$j�=�<����2G���m�~���[ľ�=0zg��Q��9�>��@�/Y���Bw���{9�RW��Kt@5Nňi�
Static task
static1
Behavioral task
behavioral1
Sample
36da02274021e1332fb9490a1c25924e3dc9b24df3e2f335957ebdccd1670954.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
36da02274021e1332fb9490a1c25924e3dc9b24df3e2f335957ebdccd1670954.exe
Resource
win11-20240802-en
General
-
Target
36da02274021e1332fb9490a1c25924e3dc9b24df3e2f335957ebdccd1670954
-
Size
3.1MB
-
MD5
0b080e160f6f1770c759fe3b115146cc
-
SHA1
3513d99220100b128dbd33bb404167a3c4cf245a
-
SHA256
36da02274021e1332fb9490a1c25924e3dc9b24df3e2f335957ebdccd1670954
-
SHA512
3bc6a5495cd88fad79d32250bc42e5733a704cfa8b240a17f22261b0ca8afce104692cabe040459560614bde7536a55a1f9e9c54207f6fa617384337ef202aa8
-
SSDEEP
98304:hiBorSpyekvsswIpbmMN4VArTtXOPxVr0W+h:0BgGA1mEIMJXOPgW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36da02274021e1332fb9490a1c25924e3dc9b24df3e2f335957ebdccd1670954
Files
-
36da02274021e1332fb9490a1c25924e3dc9b24df3e2f335957ebdccd1670954.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE