�X0�;j�>�f�qؤ.3�Ї!����������~�8�1��'��9��Y ���P���GA�����O9��a��w�V%����L�����8�uY�Ҁ��.dSVEW )�& ����d��m����o7����� :#�m뎚����_�l�y�iĎ�@��yz�Ԁ����@��*�S�H@\���u4�����mP���I ��{\\UGUS��@kx�],�S]�=��g��S��Ȉ>��;�ɷ�V?TuvW���C��W�6c�����v�za=.����j�0�N�>��� �R��$ą%�r�T'M̄e9��t�##7�c�S0U�C�Tp�bPI�M8Y=kM��c��:P�DC-�a�;uU�^���`�}�A���P,�C��e#L����s�)g��X��`�e8�� ֭�qq�~9������j*>�b�b5D�K���v��^��n?��^`�O���@[���砃 �z�'i벮�tGتM�}����<�^��%� �vf � ��;���L)D�R��?.��������_q�~7(��ha9����Zhb6%ɆX��zIVT�EM|YS��=����|ּ���0�Y��t�E��8�է�[�`}t�;I!.��>j��!L��~�$fn�u2 ���� S�U��S�[�A=���;�71V�t�3�r�%��;�ݣ?孩) ��gnlU�`N��G1�)��t��i��{3��W� �k�(0d�A�ؗ1��V?~��bN�c����qor3B��S���������)lzq.����i�&9J�s��x��`=0(����8 qH��}�+�|}���<4*ޖ�����y4H�~4�#y��#.A��3[�g�ٔ�N��E,S��;Y��0�ְ�?={=��J��f!��^�����VK�FpΨ��*��>����!3��{�@ր�@њ��+���C0�����w��wK���-,>H�Ey�m�����M֨ �<pERïڲX�-83�eWQ����2���[��N��°9 |�f2fm������:�A���_8��n�_?�Klܼ����F��k*���ix���H���1���۰<{��sbtIV��+�_���ML�X;�F�����=i6�y��!g����7��w�M,�X�V�7�r���~�Xr�� ��������J����GI� �I+qȈ�xA4_b9�� ��20�}��+�����5�$�v���2{�� �f�]=<>��"�щ�~��n$�0�_�u�ā��oV�%7-�)B�B}m���_T�E �|Yo�cM������;�0�����9>J"��r����m�4���o���e �x6V*��S�BbxMϡ!.l�r�#�C�O�:ue��������L�����R�k&1��q�:���zrTm<�HV�&�>���Xz� G��k4(b[��!��tM�����B' Jz��É�Pyt�6���o�5k���+��!�5�����!�����U?v�I�����V1�*2����F�*9�t�7�$a����X5"��#n]:>{��J���4I��I9$�8^�h#ԚT^S��F�j�Wa��C��D�b;uLW�- �e=�S��Y_5���L'��7��Y4{w��59á��+��*:��>~�dη�n �Fe�q�8BDű1B��&�����3�������C�ܬ�m���� D����Y����l�Q�f�~��sY5�0��_٣�λ�<��Β�$!M�����I�n��9� Gn�b.�^m�"�Xy)�r��3Pm1e�+I}�������%ur�����C> u�?�b��@�+_��6�#�N#���b��gN��K6���{�o�s� �@��24: �nU;a��.��ȓ�bc���C1h׆���ff��`x����B���� �����&�8|]�6�zdo)|(����Hw���u�t�������bj����8n?���%�m�b�Dk Qz�ؚ����nI#�nR��q��.�Z)�\�:������&��n0 �;(�@<T���YGe�\I�� ��6��M��j��� /2L�� �Ggp�9żζſ``����i�}�;���}�/Z�,~7���t��d���%�*�7�ё,�WT��<�����}8%�_�V(�;w�.�A��c��1oFݸ"B�{�͓�������S�O� ��.Ik�U���AXS��`َq�� F�0S�Os�X��G>�P9����\���lïo M�,8���6)��է��� ��� �u�#cȘ=D�ngUD�)w�)x���3o�]ft����NO��i�{Y���y$���/&��Ex����uxS0O��%|�Fe�Y�R���=w )s��w����L8�W�����,�ө�2RW9(��U ��-��%�\q��Ia5�A���*L��v��F(�홶��s��BhA:�����-��.�q���K����w������Q�� �p�!c*�`�5[P��U�X�N֭ ��KAA$e|[��D�l'>|k`Q�!��£�M�ӂ�W�W�����曍.�������܂i��Dĩ��:/9���!�|�ۓ��e *�����ݹ�}����ȾDnPON�:���d�}�>@�%Y��+�l����=�gUՔ}�u�]�α������LHi�E� ��J�J>67������]�b,�~���+g�dvC_,i�:��A���!戒��\�-54��� d��þ*Kلhf�Z�|ċ�)����t%���O�TQb]WDbT?3W��cXD·J�y��������(�ۭ!�y,K��Ս����6� "�L��E�7�A���T��Pa���OK��+b��u)P���%�!�?�����0Y�7��-��v ZDU�f�f�c��d��_Tt���Kd|/9hon��A,���eg!�� ϻ[Lw��xLmCaJ��âI�5[z�}��,<-=�VdJ��1Ʈ Uy��rUZ;�Ǫr0��LOJo���:���_8Q�H�\�9p���e���?�Z\N���� ��b�dr>L��<9.Hd�|W�r:�$V�ŗ�huE~�~,Nܦ� Њ{�W�d C�PH�0�x�����]���Bc'<m�G]�d��?h.�����w����u#�v�qgEW�����/�*�r�������[u�'�Ȟa���f�UA�3��Cf�oA�e�h���zY3���N 1����k��T����i��?U�?~(�G�D-C��e�����6A�y��L���,xOp������?v S�2{B3��g����a��שu�i)�����_6$ �=U�!�ت�p ��EqUݬ���]ڡ_f�y��L�A����++�����:(S�>��������rE�|���ͭ ,�_K�eJX3�H@)�C�U�hԮ�-���Ӵf?>�A�DX��u��i��N�r�ZC��@:o�3"�r&�X��|NgW�����i��ݟ=~Yܥ7�o��e"x� S��ĩ=/_�b�ʩ�n�/~�w`�����l�κF�� �#~�������!(���|������fss�щG��۾@y�~��@��d �ڌ��=�E�F�R��&����s6�:�mx۱Rt�p�&�B'kO��# ��~��s��8"����� �с�G����R6
Static task
static1
Behavioral task
behavioral1
Sample
50f9cd03ed094698ee550f56cfb88190N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
50f9cd03ed094698ee550f56cfb88190N.exe
Resource
win10v2004-20240802-en
General
-
Target
50f9cd03ed094698ee550f56cfb88190N.exe
-
Size
3.1MB
-
MD5
50f9cd03ed094698ee550f56cfb88190
-
SHA1
b7bb8f10dc1c48cdae8948b4544d7231405c6c3f
-
SHA256
3518529a20a836fc8d02c751037674127c3c3e2f2efa64b9dcf75d56ddfc2224
-
SHA512
924d7363e419d12570abab254443ecb07e59f3c54eabc1ebdb5e7ba3486efbc043bf199a711c9eb5aa32414ef891d454bf86bb07034dc0d689e58fd0ad4dd63d
-
SSDEEP
98304:YFb/yVEx4XBr2vurHHyzGD9TDsvDDii2nl:q+EDvwHvRTziQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50f9cd03ed094698ee550f56cfb88190N.exe
Files
-
50f9cd03ed094698ee550f56cfb88190N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 885KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 151KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 86KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 295KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE