��5Vn���4 1���2��4�d�_����h���3�Rȼ\����d�>t��.�dI/��e#; f�����w��Z�wtU �6�� �oXl,z@���>!R�df�M���2��`1�9or�Ց�*!9��z�~��pq�%${p�{��B�# K�M��*�j]�Xؒ����HȤ�2��h�D5��Б�R��p����i���7������4��Mp�:�G��"Rb�����aU����t�\?�ӫ]]d�=�L�A�04>!�#do��LV�H=��I ���Q�9%�ěmЙ�I�j`�$/��9+�j�Z钗�J2:~����_S����4����T �ޘ�����G����k���jV>��D��XP�N5ȅ��1H6N�%����q �����S �f��Ų>2�Tz%�e 8�Ň�-s�Tv�a��b~�ُ ���zɳn�.C�;�<T���#����̍�h�m��{z�����W�Y�1�GjM���9u#��#`s~�P������������A��4%���{;���uJ����=��>,fl�h}�MV'���%B����M�y�b.�}��\�g��t�q��aHU�����E^HW�[ 4@���!f`�]b��窍�����m#m��N>��M���H �UѨ�����2-��h���T}/,l���|�#��ok��%����I�M����`t:V��`llK[��FR�DԖ��:%��/v�L���5|�~i�N*�.�fhru�IxC����,�B5�I�c�vq���M��e[��[b�$lN��x���&m��0 �6&�>W(��L�77��榑sU��5rh�V��� 9��X������Xt]:��3Yg�&gd#dF�ޢ�TQZ��}t���m ����2e�ɱ%Kxq�����n��H�@Y@� f�F]�̌ ���e��2���6o CdMu���� �"�Oj�NU�L�z�E.`����A�j"��J������9�Q���r7��l�s6�샠6mzlL�n{��V����Y?��n�흚�r��� Gk��I �� �H���M���4�,�3����T��#Ujc|ly A��ٛ�x��NPc?�;m~H�ډ܄tu\���Pq/�w4g>�ؤ!�|G#9����zR�K|K� ���i�-/��d[�#���9`��6p'DR���l�J|J�L��rd|"y6�Y��j�����vc�֔�MU�a-���p9��ūrs��]狅V]�֢;f�{������?��Jxy������N�v�<C������#��ks�xx ���j��ck������l��ϲ�agKʭL�����Z�P4.^����XM���d��]�?���f�Z�1NM��#����X�-8@vq4&�!ަ�H���g�����7+6�@[��V��gW��v�� lB���u�ck�o������@W��7�Ϯ>�y�~����ձ���L\��>�xިq�o.�=N��M����PN����#��AmQbR�l���&����L�X`��mim�<Y��?��Dڝ���P`ήR�|8J���� H������S|���ճ��֖x7^B��:�v�'Jrp�E� `�5�x4U~��S�r�2;��9�%���3_�Y\N�B}z�0��/9?�jjj�0M6^�h8f^Qb�aOqu���.�Fs1�������܁��H����f�j��;�b�,=9�C�Y��� s���((�>��#m/�L�_�a��N��bį ��b�����g�I��Kp���:)>���MA�;�i^���Y���ȧ�'ة?ޑ�{���ņ�CO�2�#ӱ�K���|�"e���>tℛ?{��?Y��TĿ��\ke�?Bys�mI������ڋa�? �[��JHqm.W=GtU_;oN����D�0M�<�钲����c��y.���T�����-2k���!p]p��6m���M�T�H&S�����AX��)��c��sQ�_�4���ikx�w`a��I9��IR���� �X�fJ�4*b����R�h@ωD��O�*���#R�7�͊�o��/.��{�U/hC�ZA=��참��/w��K��� ���3ݱ���T��W�u�˨r��R����>%�m<~V�W�PY��d7W:���[����YT�M�*��πη��M�i�X�eA��e��ǟW�6`��B�?�v]����8A�9��"��^���5�����zm��_��.�Pƨ|���g���Q��1X���T�" ���M�Kn>��2l. �Q�C�m��4<�5[8j�C���R��esׄ3J�g��ļ�=�|חo�á��{=~_�������lz{����E���ݺe[�S4��k[�C����D�|Ř[Tu^��A�/cH�C��R�ʜ�U�|T�Ti�9����VǛh�mV�(��G`�Jjޚw���=3�B�*�]�~/�>�_�w�����Zl'3���b?p}��v��tX��+2,��:Q�d>����֏��g?Ц�Nĝ�xN�>�����ϟed�3ag �e"���z�ͤ^z�����M�b� �r`VPe��t��xlr� }\�S�/���ݏ���h�b��0|0Wk��MG&�=�0�*F���d9D�/��,|OXz 9x�y{`��Z3ʃf4<���IQ�+���`�/j[{����ڞ��� ����IS��Z��Z��̟�3��%y4B�K(z�ʡ��*���;��=l E�* ��)-*�e�����ٌ��N�1fX�����B�WSHH"�m0��g/7�*��H��%�4�nr-�jʜ����)��5�|uh�7乩�F�>(5��#��&�0�hk'�[h+��!��{Uq�?Lt�=��������-ĸ�JyFI>sC�i�a|�.5p`Ĕl�E ���S¿�4z�����X�D�>]Kfb�6 �:ɵߔ� ;C۟Ƹ�Y�⨎��B�,ϊ������� �C�=�vY}�[/iԋS�������y�� ���u����2�EFQ��5S� #�9=yOF�'�wmg6���sf�i�C��83�M��<�lX�Q9y�d/�l�:Z�*,��O!Kv���=��4��1P��E��l�F�uK��̮2�N��Rw`'ߍ���]|�L�*�9����g�k���Xh�l��!�X��yL��g�>�$P���z�7��T�4-_h.�c�.Q3����C�c��{����=ET�P��ox[�Q�=��yf��)!^ ��C�X�M.�3n�QoiV ��5ɬ�|%rT�#��rP����2,� F�v*�^�l�t�t���ur�ȼ��;9q����G9wU;C)�?1E�J߲ ��`�.l���*����_� �ZT~s����n�4��a�����uB��$l��h{����M6&fJZ��HB���m&-���VK��fP�m�q��n���bQ�f�r�m����rg��|��|H��w��I�7��*<th#�3h�h�x���MV���������7�:�e1����%cl��} �#�������Y�ˀ8�ʡ�E�����\¿�>8��?�MY�����v�!�F'XY
Static task
static1
Behavioral task
behavioral1
Sample
d319819aa29108665a20b887a14dd020cef71136f9f71083b8307901d2317ada.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
d319819aa29108665a20b887a14dd020cef71136f9f71083b8307901d2317ada.exe
Resource
win11-20240802-en
General
-
Target
d319819aa29108665a20b887a14dd020cef71136f9f71083b8307901d2317ada
-
Size
3.1MB
-
MD5
5cc50caa6a947d44711b85d4afaf7ee0
-
SHA1
678b61d99cca563da5c69303c7d04b3e871ea0ff
-
SHA256
d319819aa29108665a20b887a14dd020cef71136f9f71083b8307901d2317ada
-
SHA512
7f31af15eaab010b2d8f958ce5e939ab444ea86640658c99741d06e55ade9a21cd0c3222a05f59df1e86647c8c2811c8ad01867273a878c011010eacdb9458b7
-
SSDEEP
98304:5P2aaG0Ma+KdG1YbBnTnrVvilt9JB/TGM:5P2a7pWG1YBTnrVv0z//
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d319819aa29108665a20b887a14dd020cef71136f9f71083b8307901d2317ada
Files
-
d319819aa29108665a20b887a14dd020cef71136f9f71083b8307901d2317ada.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE