rI�M�p��Y�� �]4���E����y���v����;*[�B�v��?���NT݈/3��>��"C��b�w]�YSO�G���Xщ ����1-���n�����;����� h�#v��}��;)��;䬄}Ms��yװ`K ����m�#/�;:ƗFV��>��EQ�Ń�$|U�M�_�� ����`p����\�k�퀘������az�`��/��AC�!�?�z-o��<���bf#���4?�Pj�S��X�%�q�GAm���R V���# ��+�O!�&Q�9���r���2��{w��m��c� �;�fQ)�z�����^��_�س�q����@��G�����v�3Ʀ� D����pg�`d��;����g�k�C�D$ �������7����k5AZ%#�>�b������&Ҡja{7�۷�H�@F��Z�D���� �!������Vectԃ<m���Ey� ���6�1�m�h�Q��Pp�����네�f��#M'�����,T�f�� ��,��zL�qP'�L��-`��n)��|��Sƛ�RW�(�{�x����yn�أ0�7������V�H`�W���MZ8��R��l>�k������g��$���^h��<���ug �33��n�1m�U�D9�˷N�8�*l��n�����ϑ�p��@I������/-Ů������/d�!�w�溏F��Pv7��y��e�lH�� �.e^���V�� nV-�W_�9uOjPv��I��$ə��0���i=L����l�Z$�z@Ō��&�Q=!�P>��⬍=��؏�C�J��D�h��ۑ�/�3�����떽���j=o�Ñ���Fd���P�j�|�1��_��7|���u��|O������0�V�=9�;��kMLJ� |Y�d/�S��X4��.�A7�OU��utϫ{@aJ��ƚ�����l5j<0L��� ��������Ki��7��N-Ow=8~_3�I��D���Pv�AY�C�\=�I�uW�v�ۙ�Eά <�%'y��@�R,�58}GxyNo��h��&�:C��<q�J<�h�fI۽��P���ğ$;$&c=Ki�8�A�����8I���Q/�\}�(R�/�e�ֈ��7(��9ˁ;���3��Q���zn4) I0�ӳ,4��,�a3<�UBS�2ҩ^�ET���"id2��5�ނ��6� V81��j��*�]����7� �n�V�B�I�*����N��=�Y8�D�/w`� f�|�E�soP�9�iP1�f� b ��!j��+2&MRjK�B�W�L���}�eNd�i�� ^��l/�]4 ����k�rGҷ�ҤDd=����x\t�a���S��z�:K�����a6w�>[H�@�˧e<o�P�UF6k�\�e�v�P�����0�R�!L���v����.�����tD����QD���� !�B�� @��r{�e�u�_��蚂���`�V�흜o���JM��o��^P�L�N䟟�y� E ��Y��e[0`&v��ۮ��9�"��ҋ�(<��³�ԛ �8����2"Cx0�����+Dy��I��|��aC2Q2krDjm�tv2V����~m�ؽ�NS� �|�������ꕃ��\%�X��;���9-�?^%�%��SWky��ݱ���>��j����#��J��ީ��LZڤ;�C��,kF ���Fqɤ����lڽ%��>����)�S(��!H=t�@�>{?�72��������]�����Ü��������yN"Tp3�h��C|�9pЎ'B��U��*���p�Q��8r������:������uR:�$Xך]��N��:��<UGr_3��7��J��yga;��~��^�F�?���Q��ɘ���p�9qT��&�����O��&�PÎ����Y��n���b�+]�S(��@bYk����D�6BZb�ۢ6�b�k]٬:d��w�Y�]Qa�3,a�w��"p]Q���9��:���o�|b�K�mV*e1���e�-�/�k����x4�R=�]B��H%�=+4Ź_d���oK$�6f�\B� �|6��@Q��W��Z��l����5+=��"���fFUܘ�e�ĕ/��� �:��c=Z4���W6�LM��R�Tt �va��:�ѕ����[9���K�%�d`B�H��.�ʲТ>�Cv�bh�!OF_%>^�� ��Qr�!����������ΰ�]*ͤE�z��/�o���ןЛ+ ���@; �y���f��ɧ+գWf3��?�F��9*��I�D�_|�� �J���4��g�Q�K��O�W�+�d�ĸ����1��x�<f��Łw�W���u�u]��P�k^�8prX�uÛ�~! ���~}����8��^��H��OZ�:y+��P���P��^i}�&��ʧ��2Y���Wn��6QV��h}+� <xPZ�hҨe�L�Rd�ҙ�~��mJ��:p��B��SuE9�/W~���#�VHӠ6�s3W_�9��C*1��D��,�K��U��Wl� ��S��ǡ٦@D����d��]��8++�{1����z���c��ƲY�H��$��0ᑊP��Ho���n�l����`P����J�y�Vc�Mxr.�#�ES�S�Fo-�@a���@�F�Y0A��MNꍻpQKb�� ��مl?�o;U�����?陭u��p���Ƃ,k{�[֗�MR��+��?�<�qʤ�7`��6q,v2�-��?ܹd��ȃ�GQd��l'Y��o;Ɖ30��q�$�Y;���S���,[ ���{nkG�����>n�Xb��p �^,o��tq����$���i��ӷ�� �T�Z>MR��t��53gF@fJT��+�fk���&���ZE/�}�5<O�\dѕ�)����F-Z�-�4y�UDKo��i��M ��pU��s�-���Jܶ��4u����םf�I����=��b�D*�g.��Bjp�~D�1��(��&Ҫ˓�$�gU t�k���U��'�h������Kl�}����ޜ婺��*�;q��e�d�a{%����|2e7 ���,��Qk�q1Š՛Zхe�/��d�c.ڰ PQ7�>�JYM��T�w�M3drȷ�$�AN_�S��R�2L�|(Ρ��qr �U��;F"��@��>#j��PX� �:I�@�6ek$���F�+!���g� L!�P��8D< 3�O�>�)�2��72�ۨ�i����>�TA8-vc_�(!䕶�ȧ� �f��->F$Y��Jq���3m���8T���N�h1Y�j\�������B/Qѯ��VO��-H(_2K@�� |R��8�zF7��U�!ѓ��)I�5\aF�������������tt��\?���n��h Na]%�S5�y�Nn��S�"�>�����J���j�?|u�����'X��n��bG��C�@���0۪�Z �<��/�K�
Static task
static1
Behavioral task
behavioral1
Sample
45a01186abbcaccb18b911763256ba802629ce3e633a955711563554a2e2c49d.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45a01186abbcaccb18b911763256ba802629ce3e633a955711563554a2e2c49d.exe
Resource
win10v2004-20240802-en
General
-
Target
45a01186abbcaccb18b911763256ba802629ce3e633a955711563554a2e2c49d
-
Size
4.0MB
-
MD5
8ef9a6332cc61bb13971d53d05497d38
-
SHA1
684fff6491adde111ca04c9fb56244ea87426747
-
SHA256
45a01186abbcaccb18b911763256ba802629ce3e633a955711563554a2e2c49d
-
SHA512
6219c918ccdf9063c3b434351190b9176bb5f2a482765a13fd43050fd37550455961c8c6a492aa0e4f7e07c5bd37cf17a4c9297c6245ffaa347323da2c7a14b4
-
SSDEEP
98304:ENECTlJGTxydFo95mL67/dOVq6ERdMjEJgzyy1dKNXSA7:ENECTloKWpcc5AgJbyEXR7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45a01186abbcaccb18b911763256ba802629ce3e633a955711563554a2e2c49d
Files
-
45a01186abbcaccb18b911763256ba802629ce3e633a955711563554a2e2c49d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 2.0MB - Virtual size: 13.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE