碘��e�&h��6/�Nldt�Pǥ�R6��We8x\����i%�;E���/��s���ϫLȕ(�,���J�V����.`g���x�p�m#37bH�������7S?}��1�6�|�������u��~�{QRs�@k7Iui�pev��!q68��@:��I���=��[iO������_�k�SOySf����i1�8�v@1���P�ty���>�pa�.��j�}~)co|I�P�����V�q���P���=�d�T&��?���%�&Y̴fՄ@����k��V!�CE+«f���v�dA�� =�Um��"��&��n�����(��; �*H��~���Eh��=T]~�����mUz���"���ӑH�rZ�*&����=O�<�&h'`_��T� �eeŷ�� Vy�I)���\k![d��Xp�;���dy���7c`? ��c I2�EPj� k���,w]#y e&ߏ�Q�}��h9Պ��R~��#+C#9e��no�؉���:&@�8�ž�-�#����د����9�;Z�t�����'�Stx�6i���I����`�zm�nk�&G۰�6�6��q�s �e�^L=Ϸ�M��/X߃}�_3@��3��)9h�T�֒2�� ��;B���"��P:ΐ�ή�=��t��o:t�G�� �[�GL�u�}M]M+aD�>��ڔ����B⟒��/3�����et�H�]Ux�I�T�����^;<W����u�gϵٹ����aZ�TR���Q�b�vm�/9}�N���f�i��h�sЏ��P}��q�P�Dq�x�ï�E�,��R�)���_�k_���WFV���WF���w��Y����Z$趣ޜPF�~G��%�9���z�'t�t��q��VM�',����>w8����6L���"�!�o���T�kYO��G�Q8�V�FJ�$������~��Í����Ҹ��h�v�廰ۺ����ɇ��;j����F�o���ߩ.`��V�pSPL���%����n:ֲZ���-k�e��_$ �l}�'md"4:�>�g��mڴ��D�a�SRKĭz�X� �����3[GZ�8l�Pr��Ǧ��Bk�� x��Ďߜ�{�CċpxS�݉�����;�:*��Cж�,�{��C� ��| � ���O'-�]E*���w��es��\G���� ��Z�@�{E����A|?3_h�c����I�����fV�S�TF`қTl�4s1��|Y'T�{�� U��s�k�r�.3�H�e0�/{Ê5�D31ߵ��ur՜m��ָ_��w��gh��8�7М,(ם������M��W�e�y�����b=t�]���6f�0����B�9|E�C��-�wa�Y��6!��o�[���Q_����E�l_��������.�y�ځ۔��iR啕B�g��k��.�ڔEϳj�W����H�T4�8��%���C�>���q�d f3k��靕�&�V=��m�ò�fv���ʓ��u�u����]��� �$��[�8�)H�_wB*��(��4J�y�������]���5m/!ڔ�$����/�����V���)��[8��D2C��H�LjL,�]��ڎ�&����]��I�x�L#���lSǔ��� �;u��/�v���l�[Z ��8�X��c�ފ�k��p�����N�D�ê63u%����x�>�og�F@��[8�� VQ�N�K_��}g�|:cW���GY]��D/����E����~���ɸ'l��$�)�.��|���' icD<{���y(�6頞���vh�Z����"�e%[�{]*0[��X��D(���0�:�臢'3�Ha�14E< ԥ�"�5�wa����?p��7��;�j(��%R��eٷ���0'K_��Ds��|�G�V�b�ۆ7�~�碪=���t�����g���DP��BAE��������avW� Y�]���Y���f�5y�w��y6����Τk9�{�.�-�}�����K�z��:���bdž��]�0|�9b4 mϺt�~��!����@]�{�ȍ;�YY��,��(/*21+�s�*ahY���n����0���]�y��}Y9vx'���1��a0 �� ������qvFq�"�-T������'�q� �Ќ��=�[�"A�4,C_Ȃ�<#��C}���n9_��K������,�1t��w�m�4ԗ��&�Q��+��]>��伭�zs�U�{k���%�Yƽ�����"��˵)��?=��b��2PR�Zٯ�FW5�~"3���L']~X8�u sL4�(�҅�j8�,�3\.��#j���u!#��T�E5S�,��{��'�q�Xrz|�ѣFv��2�� �g��E��)<O{:H���&�ܥ�����ȷ;�i�����)˿M�`��6䋽*hd����Sm���v��S��&˷�<SE6@]�PX�m$��䅕O8���sE<���� W�#���O�l^T����#�,�ӯ{C��������R�e��nZjqTxa���`� I���I[.�V��,P���|�A� sd.�ײ����&{�b�ԟy/$ց����ă���KW;����O���v8��ᕒ!\�������`��8��mU���" 2�M��p�,^1�L���O��C$� �6�#�~���0���SIEkR�����4����xU��? ������LmVGP�~���ݠU�@���+AV��q�Wj|�@K���w$�C�,b���P)~^�l L��`)(������<|����mS�nj���C,3��C�؝z�͟��5��nҘ�"�*��)k�y�U���Q^ч�F����=��� 1t� ���q�������M�T=��GB�Nx��&v���Q��Ӭ6�-;�_ zG�EU[�`���Kb�����o�G���qӭ��]��I���4>�+����n�[��W�z��.��k����]�����'<$����j���RR�<1��hf���:�T�G��k%�/��'L���U��F�Ц*��X\�c�,�<6��%�����e��W���������93QYB�l�1���'��F�''�Pz(u��GGȈ����D��[���v�}B!�ыv�R�Ab���}�l@��# ���ɢ��v�f=���q����P�TQ�us8}���/�kP��Y]� ��@ N_�l;��,�*�q�u�:�"QM@���W)m|�����%\�5ӂ�+k��+�)O ��C����;ŭ����*g,�}Ӓ���>�ɉwLܘ/�<�|��A�����$�� `��/�=/��#I��Q`E��QCVdsQu�%����*�!ߙ��֣s�����GR4t��=v���S���x��l�~��@���nP�o8NmV�{Sc@���оr d0�Vŷ��IB���A�:L��֗��j�{���V`j���k�D�O7��a��eﯾ�1v@P��A쥧_��㻏 Y���{������Is���)^Ϳ@��Ho>V�EͶ�?-�N����v��rAM)S9�U�@̷"|ʴ����u���n�o���� fc�T��vb(:�ZL�lg~� %֍��:�����e�% 8�R�YF�����8p���M��:E�;Y��Q@y��Ji����� �D�{h���6�jc��C�*gg��c��e�;Ca��r�x��G7��2��Xd�Ft؆M�w?[�� ÇJ�����[^��H��������ٷ�&
Static task
static1
Behavioral task
behavioral1
Sample
2bd93944f72fa70908f7bd74874824d0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bd93944f72fa70908f7bd74874824d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
2bd93944f72fa70908f7bd74874824d0N.exe
-
Size
2.4MB
-
MD5
2bd93944f72fa70908f7bd74874824d0
-
SHA1
51bac07d7807580616c2bf3e07368ad28bf709a3
-
SHA256
f8fc485760956243ca6ca457f6aee434adb3e892d27d83508e92a6adeff2e880
-
SHA512
fbc988c91d4cb9409a6c3827b94461ed0eb2cd05743bb26be4f0334677e26a2e8b4b9ea6109d4c13979c640dc766c8230c7a8bcfbced224ce58b3060d0b32389
-
SSDEEP
49152:nJ2DYS9JMo17CQHXVg6gci49c0+EtzB0D/1ldzdi+g:kDYXo17BXV7HhftBIzdd2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd93944f72fa70908f7bd74874824d0N.exe
Files
-
2bd93944f72fa70908f7bd74874824d0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE