���t^���DHiTd��o����O1:?��W}|}���oz��>��L���-Y(bb0�������s��]�rH����E��)�]���"��@� ��\�c�L^v�H������:��٢���L���#�����6�rA�����Gz�8�"\�!H���Pa��X5�p��3D6Zn�v� _1gK�Stk�P�"<LRa8�+"�ϐ�̲pw��:�P�iw~��G�Q�6��L@VF �}��+�~Qa���^���F_☝����n��D<Y�κ�ZwA4 bsI�����������?�픾��s)��L�������]0!JmE����9�5�a3�v�/�\�1��g_�-J:pB8Y��0MW�O2$fH�L|�Dƨ� ��VYļB����%'�8���R�e]-@�H\����� ���<�ܞ50_�����ma����){5�f{h�]���-U.���,7����z������:v8zg��� �& � ua��{���� ����n/��c�j��Ǔ�#NGߴ3'#��o�����3�z�2����cbnG�tʲq��y/J���et���B������d� �d��*eD�j�ҡ�zI4s��l�M�6xP�9��$^nb�ُ�8���袙��O���6變 ^����qbJi;�o�X�>H �b-� b�D�"�Qt%TVF�Z��э�_f`�/�pj���L�h8����}�����ZR�l���^o-Ai��/��� S(���&��&�J��4���9�!�x&L �pRx���� T�%.�?m��A�R�"� �l�ϴS�p��L�[ϲ��&x�è�fݧp�^� S�w��)��쯹,��f1��K~�1s�0v�'�q0��W���X�fJR��l>T=�s�zi�"2 é�~���z��?��G���=� U�(�(y���#��Z�2�����/��<�+��q��!�%��ovi��U�6����cPf���YrG&O��7[�V�֩����۲�I�MZ˹!��#]� us�� �q��/�r�-?-B�_~�T�!>��,�&���7�A�ա8Qѕ�4�����c����0O[�+�-�f,�����WP6�$�1$�[�U=>��c ?6Lg�������,�þ5n@�xT ���j��� ܮ�0��<aj���gv(k�4/8w��$�*�4�CP����:�T+9�(,��Q�Krb���n,�w�=c���$d����J&���������i5�ɓ��6nn�L�-��b>��Q�~q�sM���^�u�ZT���M�� ��ae �dS��;�f1e�Ü�KX��?i*R z�\� �h��ts��~�u �P��6�A!{&�@�E���pY�F�,Y��h*�lYU���4����^er-(���~���ٽtI��� C�gw�����6�#.��nN�8�:jI?i����b�[��� ����S������_��3�y�.����j���U|��!��l �n跶��T�H��vt�&� ����S�G��e�4�Ϟ�b0D��,b48o&z�T~�f��0,��H��;{���"q� �����&sx}9=e�잡�D=��<��]o�_���m�!���"���۵Ú�=q*������N�?o��[���!h��-3�)l-R������� I�5X�kF;B�f5���G0_R7����"��rVI5�[�L���6����L��� o�F�Ii��/�����a���Z�ӯ���( h���6f׆-�_�����V ����^/�v�hx�9o���sxG��H���^�ݿ�{P�`~C��.%dm��^���U$̾���:�F�E����$�1����b�.sȓ���.���JX��� N�4W�L�h�e%SSf�9>�s�L�R�;��鶒��ب$�\F/ ≢��'}ބ�[l���B*̽��U�2N>:�C��-��q�;c�����j�q-W$mg?Ͷ�1�Ù��Mw��tZ���w���{n�zd�U��:�_Ǐ@ ��g���%�%��2wn��ZF7�[g�[%|m^k!1o:�ZGcx׳�w&W��w�78d����-,銘���9��8�^���IO=v*����)5����fḶK������s���`W�Xp 3X܊i]�ڽ�h�Yt��x�����v@3 ����XhZ҅�U�|xo|VI��v�E��� d�eJ����"�T�|�r�wN+C��1�F%7�/�f��$�V�!x��"鲃�ԞZ�<��|�NJ$���1���Sp:f��Bբ�,��`anC�<(�$�c�#��@�m�EH��i��XQ��ES� ���VY���o��f�hJ��qV8��"E�%,��o�a�ϙ�������w�ch���S���J�%!��5�v�A����_�w���Li�|E�k"�;�5m�����ȢN��8�#9 !(�c�� ��J�"�r�V3i7���$֮�\Ji ϡ=��&+�#���U|��������S�v[��؛?ޠ��P��z=]� ��u �\���5�L�-�Xb<ۜ����T�gѼ,�hEY��k����7�]�J��b�kPi��J-��H\b�|\hJ��S ̏���4������K��/ X�e\q{��� ��*=8!w8ه�����_YF��7�R�2��-q��fQ��q^b}O����[i�w,��5}��S�G����i�3N#j���� I<"����)�E�!��[� m�*U�L���f��()��K�g�Z;C��U����w�H�%"!�@�����8ް��j_o��)o�� h��U��|]�]�+�����hҚ���� M��2�"����u'"_���R�8&&�e�?�nT���C��<.]v�7ۏ�+.M�iĜs�lt�t�R��'mPH�0H��7#z@�&�x{��ؖ��iV˖�K#y>�� e�!�M{fi�r��v�~��71��P����Ѓ�Ÿ��Y�#�<B�<X����q6'_Z����&���fL9�r����Ϸ�<4UM[�J�"��b�Kv������ؚ1��b� �oS?������؊Y��v�A��n&̂6hl�9+��P�� En��@�9�k!t�'�N�K(i���!w��I�O��~��ֻ�1�|?�_�(㸐�c����3��ʹ�_��
Static task
static1
Behavioral task
behavioral1
Sample
3d1ef0a6de9e1dfe7365778fd15653b0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d1ef0a6de9e1dfe7365778fd15653b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
3d1ef0a6de9e1dfe7365778fd15653b0N.exe
-
Size
2.4MB
-
MD5
3d1ef0a6de9e1dfe7365778fd15653b0
-
SHA1
88fc82d611679e0b2feca492bdee65b0324c2c7c
-
SHA256
846318c2ce45b7ebd7310e58a3894301ce7399277d3775159c8954873c3e477e
-
SHA512
d682f6bdd9b2206f39edeb73cf4fb6c8dcaac26eae12f15695ced8ec1dd24c07960065ca83c0c4f298f70c125b8156fa496b32f2af5130682c93f660a54de9d1
-
SSDEEP
49152:tR/laMbYAp7s5nceEv7MuGOe4jPyTmE7ZIIKR01GSM8prnoo:tRNvpAceMjGL4jaCE7ZGCxh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d1ef0a6de9e1dfe7365778fd15653b0N.exe
Files
-
3d1ef0a6de9e1dfe7365778fd15653b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
8026fecl Size: 37KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
807awozo Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1579bill Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE