�M� � g�ʥ�Sztq[�v,l�re��.�Eg���֑֩R7�E�I��R�fF��9��CK�I�l��m�;$�Ե�T���^ͿNE����)>i�Z������eDAjW�.�h��U�zo"���ᾕH�'/*Y�m�m��e��a�k���������E��u}�*�v��qOr=y��P5!�t=;�=Ɣ�q�%b�⽿J�e�`��)*��C�t�D̕�����ڧ6] ������?|k&�����{S�St7!�����y��F�t9d�,����(���~\2�o��� �gPJ��i ؼ��+|x)bUD��-u�&�������9:�Qy!ͳ0�D쓖�94N\Jd]j�j��yDm�x�9�à=��c«�� u�b ���� 'e��b%�6�����]D�Eq+�IaW�T��� ��<RD��OU��_�=�J����4�.��rPmT���>�2t�7�XH�~<�ńMXyY��Tr*J�*�g&�U���nR��%^�9v� ����Ϊ9�SLm����eW6P����IX�d�����xF��H#�����p�>�B��%c�J8]ȲEg�\R���Y�����q��& z��5`��}� (NSk�+k���Rp~�!��H�������5;��g`����J0�J���5�3[�&�>Lel��qP��E����_h�6�RcN�ά̚�R!���@���~9�Y䷜Rr��lΪ#�2�W!ӧ�d�YnŻeVIOO���tP}T���ۅ��o@�Č��;���/a�������k��y��F{ۋ*L�cpr�X-5���ߎ)�z��4��!�SFE�3��VQ�4+�-1۠\Js��<�-�ބ����`�ل�~m��y�NJ�CtMц����6�4���-ӵ�j���3���?s�/�����p��=��'�)Z��[^�'D�P"%�:��R)����v����$7��`-��[�7q�^��00�-Ikk��`��1�:���=��?3v� �W�g�)p"�JtyĆ��.�B=6��:�͆�#T��J�vd�a��n�����P�]�6��0�A�=ҵ@B�<-������%v���V��wc�b�(�Ԇ�xw+Оw� w<`ƽ_G��!wh ��ì%u2��|���(k�=�ߟ��2��j�������Ʊ�y>/�T+y�f�CK��h��L_�L,Q�� #rQ��w1�&�ن�*�@e�G����(�������|�X��tVS��O@g��!9~"�I@�妓J( {�z*&ML<c�������\��l�@�Y��o���D���?���~��z��4�h��wM{��U|ܾ=����)P�4rY��_(��c4��Q��p3@f\���QpΨ|ͰrTD~e8g�"ƕȷ� �w ?��:Пf5?�F�E�kN�Ca/�X��2������`�n�V�����ђH2㳘"���m�r��y�A �$�,[x� �i�e�؎�!�%O� ,+I-x�x�W�h�j�`O-���8t��n�nzW[��y�J_�'���%n��jh�D�.s��L�����*��ޱl{���.����*�C��R/M~'�����J����}c]�Y�e�7�������|o�i�Z��������*��K9�1˻~c�Is���+#�� ]������_Hfo����i���U�Ò.��sǖ{�-0j|F{F�� ��5-��Q�Ջ��A߾T�w:�����#��O�:!�o�x�|s�J���\o��ߓJ`�l�-�>,G#��O*�����6�C:��\%�m�h���0{` ��1�2\�`��j��N�[B���d�d��N:�_�P(>��Ys�>���@4�xΦ��Wİ�n,<w�Έ|�a`o����7JN�Wb+���f�X�-+n�Rr��AxAk�D6k��Qqs�8H�������u��*)Y��Miuc�=� !J���k�}�_�V��+ ������5SDSK:���&p�Fo��K�q=_�!���$/��+ '������:k�����6��V��)wL䴹�ꁑc��d"r?��҄��+�cq�TeT�6���z .)|�����;�VNT�-PU�Oi�:���LX3S�-]�f(�0������7/Y���J��m�{cN����{ z�\;�a����S[���$�/�PU�kP<��a��r|G��,)(�/��+=bE۰��?G�����YA]���Ź�I�p\^�A]�FtA�9����bԔLm�($7�uܶ�!���P!ã�|��X�@@s���`�'��bA��fV�K��Y�Q��ؖV<X��G���[Ys��_Bg�E\��ߝ<o�"���n�z�<�<r�#�6�k��lدq�U�?�=W��Sѧ?FZ�[�?�L�dD�k�u������m���g�q����Q�ܨ������,�f �6r�]/�B�5ht��_���36d��D��v(M��k1��^�e�i��ϥ_!���3E�iJ,���F���U r�H�n�����dKc�b���-m��g�8��J�(��u�CE�k֍,��������Q|��i��NS���Ư[��)�Q�rn���4�"�<�ܘ/���D���9w�R��(B ͻ�,E���3��&Y���w��^ �5��ݯ�2WB�ȫ��EL��3�`��#rqp���x��ipq���û�bc��3�����r��R�C�h�4j��kX�,������#V*���`N�>cV�N"�ᦐ�M��S��@ٸ�N�܊j3e[�_�^�%"3�}3�FEx���ie��:Rǻ��M���k6��y����f����� `��aM�ώ�����K\�pm3ʽ�Nu���q�"Լ��� z~R�w9�p�jK��]���_�NV�H�k� �}x{;��W�=(S �������E2ٓn�8J���S��G4���K�i2(v���Sw+���þ�����<����H��f��y��ǵ]��+,KF[��e\�~0�kŅ0���/�`8��2��}B�����/�p�>8��$�1�ۄ^q\A��9��jv��!��צ�J��l�:(�l����\)+mo���E��Q*7�����8lz�8J����u�y}��l�)���8Ϣ�p,��l��Im���%omh�N�� 31SaC`;
Static task
static1
Behavioral task
behavioral1
Sample
ea21a214dcaf3a50f59e480cde8c69c379c9074674bd63b799d9edbede6c6bd1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ea21a214dcaf3a50f59e480cde8c69c379c9074674bd63b799d9edbede6c6bd1.exe
Resource
win10v2004-20240802-en
General
-
Target
ea21a214dcaf3a50f59e480cde8c69c379c9074674bd63b799d9edbede6c6bd1
-
Size
2.3MB
-
MD5
b6d6a79833f4537b34001a6cb7ad76f9
-
SHA1
0babe9bff29dcdb8aa1af840c3538b7452ca151e
-
SHA256
ea21a214dcaf3a50f59e480cde8c69c379c9074674bd63b799d9edbede6c6bd1
-
SHA512
64c2d2de9318b7e0dca9bf8df31b81bae5cbd9ce01606b2a0f29ca801e44d1031bfe0445954a54e427f4355e1bb7eacf2aabf86c2c6843a16afbbef4c0b9d0e0
-
SSDEEP
49152:+8F4GBYEFMfVrt0HdZyZUKIKp9/bIA3e63wDknToN58zkfwHuVfcu5ZJFKsnfKUn:+8F4GBY3dR0HHyZ9p9DIAvADkQ8gfwOj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea21a214dcaf3a50f59e480cde8c69c379c9074674bd63b799d9edbede6c6bd1
Files
-
ea21a214dcaf3a50f59e480cde8c69c379c9074674bd63b799d9edbede6c6bd1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
a4v1pvab Size: 37KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7h54radf Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7w07aizi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE