V�eV���C��|��\m�x�0���M�퇑�P(�]���O�"ҩ�F�[W&��i_���o��Sy��s����j4�Υ�fa뻹�`^���CTΪ�"�����|aA���^��+����5��곅 �eD�A����c�%J%��m�����7 �u��k?=m|���B(�hDJ�[q�@����A�-¿�kILs�fjC������L|���&94ґ�~+���z�#]#�0�kxʲu�ݺ�P�Z)"�+mڑVn� �5p̩��fa�\1�[���K����[S�B����w@��D��Ԗ�p�L#4��XQ�S����t��㧛���0`"(T������� ���=\�� �� hxJ�2�p-LB�'o�j<U��~x����Uy� �>P\�}���˓GQ(���E�������쨏W�a�p�V�( � ý���QΜ�5�E���,K/�dٱB���+�s�:��.�I���\Hզ5([w�H�2j�ݼM����`��Y�F!�˺�䰙��WD�ƅ"̡��ˣ��EN8<��7V%1��ol,8hP�#��$�灿a��X,�zY[�Z�=����~<����.��щ ��V<v���"M ��Q�3\�(��䳅z�ŧ�}T�Ê����|�Q���U���@zC)��:��'�{�B�%���S�;�L�����/C�еnp�g���`���x��<�e+ɜ� Z!�b�D��I��(�(��"7Zvz7 ;�3!����;�]�g��`zqju��U���PJqr�Ϻ�f�ڈ�q3^`��@�*Ѥ��=w���댐gɜٳj2<b�������&�4�թԲ/r���Y �?5� ��ցt���ɠ�<#9�ѩ��a��5mD e�����%a�yv�[��M6u��@D�M$G�Qe�2)��m�<L��!�Ђ�:���\�Vv�v�Ӊr�� c��yؘ�;��Jc����p��g�$ �}6pa���I'C�J��s������HwBA�L� %E�ʺ�+n��,�8I��,����S�7A���3p�V;��>��m�b֯S[NgD�:M�~�@��AB�ׯFò���ד�zߖ��a��d�c�����2C�5 E10�FlٷͿ�S� �N�ՍڊQ�����@E�ӊH���uZ�B��V,jzt�R?I�I��d�?G")y����(�;����:G�������0$���T��A��в�S}�b�ؼ�7��l��+X�ʝ���:U�@HQ�0�<h��̇����1� �ׅ��r8C>>�><x/[w;�E*0��IR����4$���pCy]ٿ��/ޘ��R��QS��������,�^��,��y�Έ\�̻S@و��^�;����<cIn����д��o���kC^��S���1D��y�����NX�|e���+w�ԧ��ehs���Dqa�!�I�Y"��#Nh��Pm��N'sqI�l��`}>�ʻ��/d0��V�ǹ��!up=��7䢭`����W�����@�����4r��ڶ}����i5���%�6_�S������?�������,�P��$@"G�u��32���0�CYd�c<vz^ƕ��I���cV�ـje08�)9�ƻˎ�,�|,�Sϝi��9��!�����ͥ���2�N��5��=4z9zb.An�� ��{� ��3�yQ[���+�jt�.y<�a�P��� @1L�nl83~�6!r�4����:mO!�Y����X+O%}r�Z��E��(j�����}��;��7'��F%��sӥ��yx��m�2�\O @��[) ����#��}����!�ʢ�B��ۚ���n�~.�<v[�o���ȡw�_��!��0�&�~3�"c±�G�M� ���p�/��3IY֨i��CG[ �07N���է}�Z�9dZ֙�J0�I_�v�����ʦ�;й��q�h�\��֜S�\��X|�&{ R��[�w$ 8�p�8�&�e��4��YӁ�I3�'(+W�D��K�f�s�L9u�su˖@g�`�����s|�n?��u����adE��=�nM�E�y�E�GnN��"�k�]=�êtwt^v���{՟8���_A�.|r�cs"�l�nIw�59��v�s+6�x�Y(z��Q#�c���q��~{�X�-�k�Ae�!�/cj�(���cj��M8L4�����FH����x��+;C��]tī����z�J�� 49��3Dr2?��>9-[@�y����W��tg�^~��k��Q9f�Hc� �ac�fmK������?Ψ�n��:,��0��x����,�c<l��G�ඝ���y�q�db�o�>����b��OL�G.}��{8�?�;����Fw=Of5�@�����r��3�_���?�Ʊf���= 2?뺇����2���C����a������ˋ\�c^����bt*���.;�urJ-��@��ۜ/���d�t�9�[�(�;Ý 3�L�6�=M�po�f��/" 9���:�ϐ�w��ȔH(?�l��Ұ�QF����jO� �v��W���� �l%��XI��]����C��LW��70cx��o)"]�WS��v�SyV�'�b.��~�2,��\�\T�o�F��Oj�(m���y��̩�C��,хҔi�Y��O� �k9���W��R�u�8�E�s�多�-��?ݓ � ?�`E7CO�f��.Z�q��4��N6�W�b]Ah��^Z�r��b������%?E���^�h��m�a���Xz����AU�'N��g+��ӠS�!%�8�,�~�8e�Z����W���J����/i�[dn�����a��NUF�.B�^\_���9ߖm�#��K��yR�4��*�r8Ap�RK ��F�y� �/!�0cBc6r!w����ݴm��� <�^�4#u��y��+>M3��j���GWsF#��.���XBL����zp�tͬ vh�|��E��(%�O<)��(���CM����~,}��u��O�:%T�@_���V��������A��t�^S���7)����V�Nb��X����:�:���K:�9�s��̰i1��`3o�;R�t8d���3�+�B�=��a��u���O��M�gщ��K:�fiyb���2#� ��#��ǰ�����g@� �.d\�y�]�c�|�M��h�*��pr@��(V �/o���P�kɒV�;�a��?���7��npbQ=w���TuQ8�r����P�-�)�� X����g������U_��fH��jmۢ��H�-�
Static task
static1
Behavioral task
behavioral1
Sample
0eb0169f4962d2fcf2866ec64d4ff15f6b20149d59203b82470fd918136515f2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0eb0169f4962d2fcf2866ec64d4ff15f6b20149d59203b82470fd918136515f2.exe
Resource
win10v2004-20240802-en
General
-
Target
0eb0169f4962d2fcf2866ec64d4ff15f6b20149d59203b82470fd918136515f2
-
Size
3.0MB
-
MD5
09626291258bc4cb0b6d753e0dd49cd8
-
SHA1
810c8626a2dc55dfcf288139234651a917823a0e
-
SHA256
0eb0169f4962d2fcf2866ec64d4ff15f6b20149d59203b82470fd918136515f2
-
SHA512
8ef894481431a19a556393b7f5fdbc999eaa5e9bb9007369cda63e5656227bcb534701b2eae63fe59fc5e6bc77f49e6dff7dc2c7627d1b749f991e225a7081ec
-
SSDEEP
49152:E7LwANQ2ZNy5GBHW8PpSvItiqpMir3y3zmwTzBo2T4wEQ431dAw+Bsq3d7dbn:6LJuMWWlt3Mijy3zJTzJID1dAws739p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb0169f4962d2fcf2866ec64d4ff15f6b20149d59203b82470fd918136515f2
Files
-
0eb0169f4962d2fcf2866ec64d4ff15f6b20149d59203b82470fd918136515f2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE