�)��%+X�\%����NɻmP"Ծ��\���K���?^z���&��d7T-�n� �t �͜��gb��.,%����� Y?~�&ک�!.�F4�9��>5M]�����R�1�ݜw ��l=%��%�^� �]���F�u:��J`v�y���~��N�ް,���5mG��&�1[S<�Zt���ԟ�����E��,U ��������18�͘�[�=��)�X�T�h~�V�yg���6 PW¢S���6D~�Տ���+'X2!��hNB�V�6fWO���E��T0�O;�Js�zȤb�H-�ٚ��v�:)�gd�M5� ��o��R��7 wD�.���P)�,#�w���3r�:�a���G�M)��I[��Tw�`�U8�LÍar����Ќ�^�����m�(WH��G��u��2�y<�j��LI}`�N�~(�����8�|�!žE�5�R�Px���]������2;�K��7��@M1JW�C�Õ�{6ָ�-�%�)��C��~�k��0(2��;n6Y.�eA-\���:�:����RY.�cG��p����j�A���Es����WT(w���&��q��py�k�V��' G�t�����Q��������y��+�n� �����������n9�H*S��7��Ա��u��R�7�;�:��rJ������ ~�O�7I�'��#o ��y�R��rj�� �]u�����EC)�P�|"ˬ&��.��9ׁN�1��i���bg�� �T���}_��hȡ1k�m�;IR�KGnG��ʳͲ�g�b1⬯��c4�}�{��$wDBD$ԝP�>V#e~~������U�x�V�wf��N ω�hX�k���@�g�lL�ҡ�� a�63�^h:���@�� $��U�"N�M9ھ�Y��ϼ��;��-mDig�`qy?�y:�f�@�xF�t|]���H��-u1[�{����u5�=�<�{��РQ�%���6+�i�������������%�?�X����Ga�3čg��N�{`lW�\-�HH;�qj���$�qU�*r���gB�μ:�4b�:ߢ�X6% �����|�a�n��Jh�Y��/��`�vU%��.~��0]Q���b�DE�������cgS゚��ܗ����l�X��w��W �4qyg������ ' �q����U���/�2S^W,��=O��j��H�e� h�MsM���L$ }K�o��� 2Q.ɭ ?�4C��S)K1<���l���Zw������'�8?6���5\ʂv��VVeY܍��AvG�B=l�vRZH�hXN_��=r�mCV��ǃ��{�k<��5'H5�R�p+e��I�� D�=��N�P�oI�ВU���M�H�������6)��^.��,@M�<.og@r��7�|����4 O�q��.HI�I�A���2�"�зL�Ŗ�HPˏC&��hJ���Ěex��UrA�Kg�s��h���������b��f�BC.�gZ��",�՞��c�a�@�"J oK���#���.b�$��z�v���>��;vF�*�ꀵ��Bz�@����VX����P:Y�ԥ¢�Yt���2���&F��6�/��m݇Ӝt�Q]��?�e����=� z`��&=���ָ�.2潠./�EG����O��O� ]�/SK�H�`Z�,vk����:L�l�� ��N��Άլ�Km�:坡6�ZҀ����3�$���{�����?���T}",� ��} �tެ���Q������Ƣ�]AMlQ���V���W��@��e�ӣ�=*��bG]��2��^�u�B�8@Ƽw�S%��yskN<��s��:���i���=Н�/ܴixF �i/���uuz:�kgT�D�\VsR��6�!#���c8�s�a3=�_���T��+��_�]϶>¶[��CsT;j^)� �#(u�$����C'�.H��i������*�&y�"�����~hi�>zL��S���A��v*�J�*.ji"$q���L4H̡Лq'@U�W��n �V^�\��"*�)?�2��:Y�O�%W�uDf�Z��������t��_1U'�_�c$z���'�^5�3�vl�L�L'L��-2w��������KD�~�sB�E�,�Tq�G����W�F�S�݀ȵ�x��h���� 8�uf'#H�3�%���m��X� �,��ns����� -N��p�0���}VF�6�k�8�1l���V)����5�2��@h����+b�ﮛE�*�Zޕu��������;34����R9��7 ���$c�� /aYeyM���G+A�<���sV��zG����\^�ʼn��3�I�'<�f̉M�d����ZȪPQ�4 ǰ�l ��P��o�3Yd\���H�I�Sl�`�ն$�Z���~J�_`��9*9-�2ٌ�����H��6��F3Nm��p�0�V�!�:��[tStoo�F�U�� � ��~%>�υ����t}�#�G�J�D}Y8E3]�������.MX>� Z�a�Ҽ�E)�%47������v5�n �5�C�\8������6'�`���g\��F���|>���%Y�X��h�`�X`���F���4�����IT-��s�M{�7�\U�-�����h��2I�Co�m�0��esT]����;x�P��ͧ[��BO��d�~= D�mT��m�-u���I��\?����A�c�:���a<2� ���N<��C嚹��X2��1E�@?��U=+��׀v]�2z�����-�s�Oܧ��V���ʰ���Ys��&������k��M�Xĉ�;F�><�l�F�g����H�^��% ���]`Y�dRꞾ +�����4�����"��� �s�V9V#��wYn�������=����6��v�eOl1��Q?�̿-��:l�s��QM2�oZ���ʤ�xQKj�fF��t>��A?^�ʁ���"L�=�e;��Z��25���=��G��o���'���F٫P7Έ�.�G�����yu�"�uL�5[b���#0����~U*�jv��y��QM��L�����k�:`�.�i�i�=ĭJ�0}̺�� ��D� � *X�KaX�:B���~��y�_M�-��3�v����=ư��@�� ��i �F��",���+9aR6g۹Z���L�|�I�T�V�뻕QBϖR���ǧ����H-9?�:L�5_�(_�z��R��-W�Ê��t�=~���C�����R��}��--��2k��d�GI��#�o�9䀼#��A���.��m�F��D̍WbfF��l��[�a��NC���C#�~�����~���fx�x6b[��[���\(���q4�� ��Q��^KL�FЙF�җ��1��HR���?��v<G|��yԶ�~5���x6��c��^�ޝ&�s8�[��A-��p#HTiJ� "אWǾ`�]]����R��2����j�c��@o
Static task
static1
Behavioral task
behavioral1
Sample
93630547db9364930d98cfb1da86ca58bb94a2dc6b53b7d03edac6992021d31a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
93630547db9364930d98cfb1da86ca58bb94a2dc6b53b7d03edac6992021d31a.exe
Resource
win10v2004-20240802-en
General
-
Target
93630547db9364930d98cfb1da86ca58bb94a2dc6b53b7d03edac6992021d31a
-
Size
3.1MB
-
MD5
56e638c2508ecc602ff26bd1612929c0
-
SHA1
c6fd9c1ca5f47c58ab2aec8580673b7e5a47fa51
-
SHA256
93630547db9364930d98cfb1da86ca58bb94a2dc6b53b7d03edac6992021d31a
-
SHA512
b49980050e29a24f7cdc5b63bdc8009964aa1d7ebe8ee7eb94b2da5e444de7d4229d4bfe744127498f89211d9acfdf64bc1cb27ccb872f2058541e208826830e
-
SSDEEP
49152:SOYFgbIg3JtR/b4mOraZ4ZAd8Qqs+cy4yz2whuJG7XxGtN5fEfK5VQa:SNFgbIgBEm0+rd8jzOwMGrxqs6Qa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93630547db9364930d98cfb1da86ca58bb94a2dc6b53b7d03edac6992021d31a
Files
-
93630547db9364930d98cfb1da86ca58bb94a2dc6b53b7d03edac6992021d31a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE