Q�KY^2�����J|�p >ݸ��b������N 9\LfQ��'��PX�Q�sm��Q�Y�nԬyA������2���/��������-��a��vrk�3s����.;H5�A�As����J"@� ��2�<�voUnF�Qn���=FpQ'BI�U�$�����b~�..�<��s������>�<�ܠK����G�s�,�I]�+���^�^�d��Ű?nUZ�Tb��LAz=I���ulڙ|�;[z,x7ʊ��&�(���E�?-��&)S��kY~�����J$ʺ��?��l�����^y��0h<g�iA5� ����"jI(yc�y�aLF7���j���M�v3d�2��7���Uտ�����r�5b���p*�;��������J6r�O���Y�b@d�uPKQ���#Bb�{�����~(�k}���_t�<j��O=�cLا������Y��֞�]� �~,A�L��� �I���4,�}@�=të(�v��<�g0OF*ê������p���0�ʗG)D�K���0�XD�}�O��Z���TWԊ�~��ő�Iv�?�t�����E�2F|q����D��g�������h�eYK�{���W|G����b�C�]�@Ċ}��X�b���C厛����Htɓ�'k��d�El��:�Vj�FḚ���!w'ɇ�{c|�Є=¹�vD*_�ggv��Bu;�V�S�H����z�Si�e$:ћ-4`#��� � Cj!�����8��}9M�,�>e�b�'%Z�/�����G<�#*�͞�E�@���nd�B@X��3���$�XE��������`�K�Հ��ގ���*�'�E �ߗ0 k���.nK! �p"��73C�nb��`�|�li��&���୳�mş[�ɲ ���C��w!:㴱�Mp"�����^,���ѕ�^-�Q����=m��`b��D� ����{�w��z�uK��:����d?w�~�pf�0������C���#�Ba07B�3��A��V�J�0���l��)���U�ϽmS�����&��=f����RvR�/���R4�v$��~ƹ����lhA����"��Y��k2L�����U)����M-��ۉ眨��瘧)�6? �ߟE�9le�6~�^�^��ﻭߙ:��WS~�@H���2�r~=X��@c��*�ˎ)�i[9�.������ʞd|���@DM�'|����d6�+���;���l���=�~�pz�Ǒj������|T,W㌰Y����suvGa8��rC���r�_n~�G&K�}r/P��0UP#��*�ݞ+v����3d�z�lTY��j >i�П ��f�T��_����[;^;8�X������\/*���g��bS����ޏb��a�b���� �N�7���at/�h�OՙJ �5�.p�B??�E�Q"webˢ���ԃ��>�z6a��� ��GZHP�D_|E���U���V�4��<�t�@������t �)Ǿ�e��S�\sg���!Պ�)���3�䌋<�Uk�)Lx%�k��ؒ�i��z8��Ɔ���(�z�~X'v)z�v᧙�Y�ٻ�O\�u���mN������ěsM��[Q��b`�瑒3u�*>������;y�$��� �YH���V���:�H�o��:�<ˉЏJ\�$rc������n��;_�a�_*�V~���\�F�m�iBi��u(pᘉ��u�}{ot���|�2�,��d��Ay龌��K�gGӲ���$tf,P����{A��kQz�pa/�n�U�y�3A gH��5M�v[s��z��$w!)��`���)G�wR�N���1?t����[!�����i�3�<!�]��ާ�Sx�{���7K��`[�xQ����_���xo����Q�t!��,Z���0���m�:��IR&�����%����%�$�o�>8k��Z��_���x �����/��G�_���,���| �8I����%8G��S��!`�������_�w��d��Fm,��[�TNE��rqN�ج"�� @g����a�&7rs�?�m��e�ux ��_ �Ho;�ɵ̤ ��k���D��mz���B8��� ��O�LDD�G1�Cn��-��X!����=��mw-c��$,����q����g�qe��ݾZAO�!���-~\/�!b�pn�28�w��0�;�,�sK�8���|�g�AAuZ��|P�Y�\<�̏SJ_���8l�FU�� ��e�`՞���������>-͆3����V �mXSفB���oD��*堀�SNKm���Gğ��{�"�Y���#Zl�HmZK��Z��츑�2k�❟��V���Yu�C��0bB0yв��{O�M���ՄKl�����*�lu�¡�� ����[�[.��D�Bvd��\̵Q��,�ۢ���XU��<�@����Y�+_Q����f5z��q�WG�ӎF���w$9(y��?��i��k����HR*ƛ �$jd��y)���!����V��N��p$�-��� ^��b%6?���k��h����l�i��V>��3K ���������4�����|� � �.Z�~�F�t8�����N��=(P�}ZA�֚ ��YwH5V�'�E��G�ֈS��Ļ��1��Ž}��e�l �D¥s�b�� �F9��g�C{t{�L���cӨ#߿C����a�j�`)/�����w1a��wGG��ۛ�FΖ�����Y��Nݝ���:w0E��;�ݦ��=:֞���se��[��9 � 27}@�$uU��s`�:Mq�k�����r�}N�Wy���6P�z��̀��Ft���m�^Q4Dl����o�V�5��i>��&~���i�p���v�:Ŝ��@����lR�ѯq��]���a�MR�}�����<@�F�'K{|.`��s���R��(��;��6�$0>IT��w3S� ��)����Ɉ� �f��� �}�<5/҈+�M��5�8�'"r�.��:oSG]u� �V���gY�2�YH��ў���rY�A��l�Z���",;�B���f u�gy�z|QL�0]���`4_1aS��Ԑ�9�� R32��HP�e� �o����/�LJ��<*n�si�.Ƥ�&�2��i���<���İ�^"蚛��Y4<`Q��Ui�ʞz..��9�oB��9��+�� }70I�ݰ����rV���d�[OD��Q�����N�Vm7~oqTʻ5�����| x���\�����Τ�.�4QZǒ�d��9�����lZ�7ɹR���E�5l�%t<Tps����_W!������������~\�%����nɢ�_c1����K�+&e�Es#ȩ܄�Kȼ��۪��P+�Q/�w�m��_��f�>�����O��Qߋ�[�Wb��H���9���5��\���at�ς����ü�p��Ӈ,�\���ȺV��-�xr���r+U� ��)�8;"��M|\]XtG;W�]��U�*�!T;��n�uC�T�P��Ќ�y�1���ʹ
Static task
static1
Behavioral task
behavioral1
Sample
77061dde12eaa509bf6762356341e2e2979eba469e502a63c19330d6b1cd6ae0.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
77061dde12eaa509bf6762356341e2e2979eba469e502a63c19330d6b1cd6ae0.exe
Resource
win11-20240802-en
General
-
Target
77061dde12eaa509bf6762356341e2e2979eba469e502a63c19330d6b1cd6ae0
-
Size
3.0MB
-
MD5
f11fc46c73f0e1597dc7fe5bdf9ffbb3
-
SHA1
2674a99f8ccec0a105509c82aa37f2b4bf137984
-
SHA256
77061dde12eaa509bf6762356341e2e2979eba469e502a63c19330d6b1cd6ae0
-
SHA512
ccf19e449b5458c35965a430d6811377d54563926f321b05f1b0d3452dc13da19ed7c47765155636b081a553c81f3580ffd4e4d704836b3cace7cb92b748c6d4
-
SSDEEP
98304:bJd63al4/Fa3CjE4y84QQvPUyEqRRDCT+s5Y:bJofQ3CI4hPqRRDCT+sK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77061dde12eaa509bf6762356341e2e2979eba469e502a63c19330d6b1cd6ae0
Files
-
77061dde12eaa509bf6762356341e2e2979eba469e502a63c19330d6b1cd6ae0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE