�/O��mT��;3�Ӟx�ˋ3���fQC��κǨcaY Z7�f���~f���C$ݗ7���Vo^���q50q�D]�g w�Z�1��@���iw���j�c/�`�����a1+kFn�!�ԇ�r�k�n�4d���s;;d�p�܃w���،��d�[�LjҶ�U����;�yPЗ *�{�}Q}͂TP�����R���R� (]�����L\� .)c�A̗�u��^����������M�cQ��a���1et��1ȯ��}xפ�3���%Y i�(�3�X�%��8'����X��v�ZL�D&�E3`RH��,&�C�����{�T��.K=zE��T�����c��D�����I��������kO:�s���J�t�=�1��m�߾��O�م-�&Jz��8��L�F���0$�E��������~��M �W�9�?2�U���"˓aUXN�Y�Rqγ�HE�� ��l�˞���\m+�'��j���dͥ�ARݹ�-�<�46AD��O$�Ú�E�?$J`�L�T���:^��ݶ�܊=5���3n�&�ώFKA������>����>�p� �lGh���f<*�6[�N\za��9��g-�8��p#��N�G<�ܬ��&��w��6���? �������Ym�@I��k���ڐ�a����e��?��ǜkb�^z~��WiFl3����C�a�)�SC�yvJ����LrR�N���|fy.D�X��T�P�9�KJ�PH�{��E;�;��Ә�Y�S�/��,b��{D�u�E C ܜZ�z�������@V�_�Y���Y�,�b�e�x��5��l�v�߶���d�ܥ�������t����DS0o�� �ex)���I�Wq�X�kWg�9��TQS�J��C�H�È����ԡR���Ư�3-��b�|0�&�yl��qz-jk��7��rcha͚�EH �F�3I9M��ϓ(J���0!����� ��Z�Ḃ=+zͥ���v\���;�%�M��X&�eqon�~QhZ�$�b��*���uo�Vo����?�WF���)�Ō�<r����>�c���Y7�������h奴�a4�Dy��V�<�6AúEw��|r� ��m� � ����r_���\�1@0�'�E�:��E�?�9�zJI�f@\x�f�=�Y*};8r/Ng�nr8��C@�����N�thdR��+&�x+�����ȱ����5�JX05����_�^��A��q�:���׳.�QE�Q��)��uW���a��Wg��ꕓ�$в?�������Yu\���KW.�vf0��-h1� m���ܼ;�#�n-��Z���%5�f�PF��3�m>��A�#��2 Ze�A��Mut�t�m�QcA���/�fH;l���͞�29����=�8(�@�Sl�˟���dj��b���"�}�yF\.&}�����[�\4y�}�3Y�Y�R嬇l�Gܪ$8��'u���� �s�O25����V�^1,)D873�M���%E�mf��aw������:��?�'��,�i��o� Ï������� �r������Tk3s5^�����X8��&�����谳�JK��l��D�vK��-��p�p�����L�6���6U"����(5��;K���FS�%�K��Agͺ.&Ty7}T33-�ؽ�e��-=�W��O<�8w�|~��6� �~E@����2�_�ت�L�����5��`��g]RJ����1É�j[�h����hZ�T�a����oQoN�\�̆�8�q�|��v�TB����Ⱦع�!s���L݊��������f�Ys_��Mr�~~B��9ρ�?�[��>���e����A��J6&���"��t����B���Dz����(� �X�}c��UqF����˖d��w��N^} uB���t� ��c�ѷ��0v�� Z[��,4�g N=@c��6w_�_����z�M 6�}�y������|A�Z ?#ˇn&����<�����n�T>)�kWR��F�4j�z9�nϯ��~����2h�ͷ<�,��hɄ�I�ߨ�y��*�*7�����2��PfM�+����R��%Yn�j��!��dq\����j�k���� 3tq�g��)+����7��fׁ���D-��%�С�^q؝0CS��Wh��dN��:���*ۉ��3��i��~���F�S�~�I���6���B36滩ʊ<FGVI�1jc�� f�\�s�Wۗ�����u��O�?��" ���`ɕ����i�C��v5�x�+��Tep�^T�JS ��c�F�zfX�7��e��&8�� v��Jv$��9�����>��O�9:�߾����U��S�47���V���Yr�|�ЧvFO�� �d[�'�KPT� :���WK�2cџ��ݜKIb��4;���$=�7�\������Uw��=���Z�5�R�����E*����G��h([�������=J�����SB�B;��\ꏘj�=��r���};�""�쬖��r �)���7i�;0�@4���ʚ�Y�g8��b����N�U.b"�u�:� ߒb���;Dc;Ht�����U��h�r�}:����Y�i56Ƙ�-*M��5ɸ%^�Y!ں<'����cm���-�����h��nw\��KIx: �PDZ�,0��#��!���?�������N /(��Iϝ=4%f8��i7<9�������H�qلԄ��.��� #-i.��J5j���n27����O�3����EJ����X)���A��x��@���m�n��b_�Onɏ� ��d3�Ԛ�`��Y�=��9R��7�J��AL6ڡ�3W/�����b� ���I%s����I/�?�<~�ң��m��R9��w�������N�YC?.�{��Ì0�+]Mb�Ğ4ϸ"��f�]�Z^�J2�����M�-�r�ph��Q��1U� �I�V#te�_���� t�|-�t%u�*O�2>��nC��&;$'I� U=��%{���y*`�4~���3ퟴjQ���GP�\��~u�4� �]��"��`���7��hr2F L.;#:�r�3Б�W<Ҷ�[k/+.��9�84�v��}� ����0�*��X��LW"������˒4H���\|Ƽ��k���z����z(�W��{P�&�e;q7�=��wI��������P�K%T,_�j����PH�� @�7��R�C�=���0TMd��B�1��sb������$�F��f�����珎�Yg�~b�p��;5rA���hV�HB{��/�C��6i�3�������ù��WG$�i"CW���io]�4� ���D�q��)S����K���żV�w0�s��b�����r�,�xC��(<���B��������h���A��P>P_EF�
Static task
static1
Behavioral task
behavioral1
Sample
278c5c22ec47af4f4d59e25ae87ffe0723ef1224e051d7f5cf03ddc19239c0f4.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
278c5c22ec47af4f4d59e25ae87ffe0723ef1224e051d7f5cf03ddc19239c0f4.exe
Resource
win10v2004-20240802-en
General
-
Target
278c5c22ec47af4f4d59e25ae87ffe0723ef1224e051d7f5cf03ddc19239c0f4
-
Size
5.7MB
-
MD5
f3c6275bafe9b48d1af211edbf90642a
-
SHA1
f902894dca78e599dff3fc0aac0542dcb7e1d723
-
SHA256
278c5c22ec47af4f4d59e25ae87ffe0723ef1224e051d7f5cf03ddc19239c0f4
-
SHA512
4eb1a70061658b1d61cfaa7b29fb9d7fcb41ab809c70883d0d6e7e3096adcc3ea162a7f7458c69c6f840371dc231cf6bcf15bbd384fcd0a45a4375535e3c578a
-
SSDEEP
98304:ydlMfTmUZsrPm8mWo2TNmovvlT80AuOIc6J/UEpud/7sWvg2fmdSD4tNxc/0UuRW:yeTQqlW1Nnl/RwdzPdfmdSEa3u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 278c5c22ec47af4f4d59e25ae87ffe0723ef1224e051d7f5cf03ddc19239c0f4
Files
-
278c5c22ec47af4f4d59e25ae87ffe0723ef1224e051d7f5cf03ddc19239c0f4.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 896KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.4MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE