g�������&��n�����é��A�� ~����]��n�dc����(�kM$�L��!���[H��R�q�i0��^�����vCw��M��drC{$���� Z�Jˉ7$n�f��(_�)�,�A-V� ��\]ߤ����ٯ˭�/�H3�P#gk�����(����T�r�����KA9�:gjNQ�η&8 �� G��ܦ���W0ׇ��i�5m�I����0%�^,��!]��L����[P�ꏮ�6�_O���3��8�pO�0���+�^ˮ5s���H*����}Q{�Z��,�^PJ��ʲl?p�Wp�u��a/�5`�� ���#�\����a�ir_�i�^����^*�<5#����˲�.���-V�!>�m����Ŗ[��k}θ��&�j���[O�GL�QCN��R��tf�~�~E)�֣ ����jؚ,��4�)�̇��lz��Y�)���H���=�%��4���:k����e����U\����ף(�'����`��'Y������I"�K����a@��S����)����,���b �8�&�¶�F7�W�Cd�I6��!s�`!vew��u�8e��r�"Cs�����ѻHTg+�S� �);�l�ۨ*p�3�V �*��,>��JV`h�g��zd��~!'�3`r�`ɒ�Ms+�>�ka�Ykc�� OU�g�C�U6�����8�1�_���B�-�퉚u�bUqo��Mƒ��q��F$��g�3@���%va���)�ޫ* �q:���8h�٦���FQ�5Tkw۲�!���Ht��Z�AXN�V�݀�т�6D�ډ�פH���#�w�{�@�v� �I�q�#��7�a�n��V�A���Q��[��>����DsL*����7�w��G��t\�z�܌*.<3��e!���8�\m��0PŨO��ӑ�-����)V�S��,�M�k\��H02y+K-��-�l�V1�{ޑ"#�l��o����{zp����]�{38�jR����ƒf�\'(��8U�P��1 ���<xb�~^L�픮�`I��:j�3���������"�o%��es}B E�NO��)�{�)�g��@�@/ʢ��d����!h}�����ly�����= �fSw� �M}�O��P��Q �|&��0��S)�Գ�Tk,� e�v:���r=ۤ*�ݦ��������7��q�MVԺ᭖��j�~S��6���ޥ2�" �˱gS<���o���Q�����hRǦ�"WD=�>Pq�q�rs`��Bj6���w@uNr9{;h~rK�'韤�韆� j3A��e�`A����q����A�d��N��B�y�[���q�(��� R5�4[�5h�!���s(x�¦1 �"��L��.lJ[�����9�����S�����X�X�V:l��[� ��^5��M��?FNO�S����VW�%��x�F���Kh� L�aJ�Uk�E�h�Wg͚�nr�P"�c(��dM�&����,�F�f��������| w4ҹ�Y�0O��һ�3�l�s</?ʠ��f՜O����I~�����N.�9 #�� A0p'�)���u��O�$/��$���`K,�������ħ���2�KH�D�aW�u�M#�<��a�TV��v](�#���?J��4�G�jr����u�� Z������Pah2�F�� HDx��>+%�@���Mg$��N��\m }B��Fa1 �d�5�X�C]+'���d,6�_�0��#_J�Xc^�-K)[YzC���8�PE��u*�g�տY^s�&p�'"������w��B:='��j;)Ô�c��L�i�{�<D��~=�"��V��9f\S��v���������3]��e�c�Sߐc����i0%�� sqj��8r���[���%�<�-���y�U��oq���������0�X�)7��������A7�̞Z�)d�7��J�~HS|ܼ���W���H���ٖ��h�#� ʔ��.�����ڀ�W�V{��lIm�G�8�[�����l�9-� |�uy�%���咚�2��ZvjtZH���T�/�8]�1`bQ ݍ � yѮD����:��BT� �;l�HuH�������p[�U<'�Ψ�Y�H.Bse��XI����T���g G�f��d?��%�B�B����O��A7m��*�$�v�e��|+0��������䗺�6q��w *qG���K��oH���>� @5Z�Kvh���vv�X�� �˴���P���nϊ����?�+!wa�q.ϟ��i`���#g����Z��T�f)���W���jU�jT��P*�wu�^�=�8���HS��):��cQϬg*p�7�����#�mP,o��[��{F�!-"��������������W;�I1��E�f~�>�rػ��Q��!��MS��Gx�VI�T����"L��5I1*'#�S��mذR�%��ݚފ�W� c��<�(|[� W�[� Y��E���_���C鄩@�\�e�J��S�<-���L)M�Y;p�����ٹ��3�Q��M�H��>�� |su���sMjD������� ���k���7�^�Kv���^FEUeb{Ř��͊��H���,��/Eᛛ�� �����TGh��_��Q0�� �z��L%�]:���S�4 gW���~��_L���87j���n��IW�v��"���u��e@�y4��rihۗ�'q��#�k����zC�(.l�i�#dV�.h�����y�5��K���~�1 ��ɳ�[�"��6xr��:��A��$��qT�9�F�δ�Ԣ�g��9ڷ;t�2?��o������֑y:�A�R�)�6�zR����]��c�����[��O�E����L�������UԿ܅�� @������Om���|�~�HYe�Xo�B��`p�6[�4E�h��>������$i7=�>7�.(�I�a�a�[�K:���� 8�jG,̉+�"�9�@QmYi���6/Đ�i.$�m �Q����Կs���$��{�p"���9�r�Į��h�Ϫ
Static task
static1
Behavioral task
behavioral1
Sample
d62d7902311397cf21fb38c8a314ca026664e7f222f2d45a6be05b8e4028f24d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d62d7902311397cf21fb38c8a314ca026664e7f222f2d45a6be05b8e4028f24d.exe
Resource
win10v2004-20240802-en
General
-
Target
d62d7902311397cf21fb38c8a314ca026664e7f222f2d45a6be05b8e4028f24d.exe
-
Size
3.5MB
-
MD5
67c7731acfd3cf12626fb0ea4964388e
-
SHA1
9754652c3d80736e961d3cb6b6ba53c13e672901
-
SHA256
d62d7902311397cf21fb38c8a314ca026664e7f222f2d45a6be05b8e4028f24d
-
SHA512
787e52ad553bca961d3a65c9a366c35ea05863f9649c002548e04bdce7e451819ad487cf0293c1255c1145c9e629f2c4d2f6599f44d2af37f8f61076dbe421a5
-
SSDEEP
98304:rZyaL2pFqgjpQ8EvbSy3EtazH8khLcO6Blrjw1dRu:r1Ly6BbS/aDphLcOiadR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d62d7902311397cf21fb38c8a314ca026664e7f222f2d45a6be05b8e4028f24d.exe
Files
-
d62d7902311397cf21fb38c8a314ca026664e7f222f2d45a6be05b8e4028f24d.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 59KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE