ݯ��M����=]�Ց�*�7M ��q�(K��Ҍ��ط�����lC����`q�f�YP�U� �M��Cut�!�ZgU�6oP�������(f�a�'�W�K��5C.�!���C����������������������s�~7^k�3��i�^��#����]z��}�~���;� ���:s���r�ha >M֍� E��I�RL���ԅB��H�d���R�/������09#����c����#w0у� KDZv �Ş��5��ѣ������W��jjO �6�Դ �%��l���i2Xf;p�LM�������[�[���v ��8wc���T� LAwnڂ���+�FM E^�I���u�ș��U�oAa�������"�QO�ś��r8E��C/ �Y�ݲNgx�CĻ�5���}wl�e88��S�H���»�h ��t)k~t���wH�g�E����o'�{yC2@�?�#���W|U�{,�l�+��PH��:��JD7tH��n䋣}�'f�����rA!B�5.P��ۡ����$�]rb���qi�r��i�|��0�0�F���8�b�f�s�>�Q0��bga Ȕ ��k(<���ǂ� ��B����R�u�Q���������]��V�K�/W����aP�ҧ��ڽc�(�e\��Z�ʹ�o��3�'LF�V'��a*w��9� K �{�Y�����d�Nΐ��5���pG����� ��1����J���aÌx�2�]�*K����J/Sg�����1q4��& :j*S�h�myGR���.���=H�0ɾ94��Ԗ��P���R���<.g>�Xf�����9I���� ��F��#���j�1�z���)�^a��Y�`� ���L�Z_�k�"f�K8w��u�T\A�QQS�.���1�v�����h��#��&�]�AKT��U�7C�揗��5�r���B\Hq�Y�X;.�M��~�tπ2���7P��+;�� ��@�������"��D��m���GI�x��OF�S��Z���ߚ��H��sƖ��Ѐ,���|�y���m��a��1�l(��k�y_�'�1����U!��A'Fi������vd��.;?���(Ш�Oc��iUD����� ���d@�&�yZa������GB&�˒�M���7,��_�獼y�Nu�Ao���I�$��0��_F`��g��c�A�j�~ӎ��Z�h���5�� �lH1��$܁��y�I�x0{~��-PF���^Z��a���DRt�*N��hi���br���0W��*�M�ۻe ,>������w���1�O�'���*3�]�hTz& y}��,,rAb8���m>Xs�݉���e� �f��P2�0#��� �Ƴݦ�a��2-ZE�r�%Nj��#�i�*��Y�z���*"4%o��T�Y��ܝW����y�?�� ���W��|;����|(��c��U�[�7�ZiF��{g�1��8�Ek$2��=eLP�0f{`��=vtUlÄ�;2p/�g���[��e�p �wru�{�쬩��9㩍��N��Lo�� ݱ��MD�����fj۷k<���\����&[�)y��&<����kTv>����ֈa(���Nh DA�=��n � '��z:5O�q�Ǭ�:Qf>�0w����BH@��rGj!+ȵ��� M-�O��ax�A����h5!�"귧�|K[�=�a� T��ߙl1z���A�<�H�!���k���kw����-�4�K�g-p�|����b,����W��<�H�3�����:�����<��i��m���ɽ��Ƙ��F�A#4��sl�����%@9l��� Z*��w�t���j��$�/*���U[��1�#�6D����纪K�~/Q�E:Ȑ��a饙�V�ޙ�EԐS��2�.p�C]%,�K� �qh�e�00���/vT�ݲ6Z�q�?E��Gڅ^6^�?~ @���Ԑr���Τ�bJ�3j�����`��jo}:�_����z��+�6���(Ozp��c���3��C�rY�n1�YF��u�������_��L�h�N� "cf^�F��w����A0�axF����通_�44sX~�.P��T��0ld8J��?yW!$���0�*�0|d���? ]�HoŸ�;N"�=��Ę�<r�~�(S���-����}��S�.Ŷ�Ƹ� ix|2X��#�*vn��D��r�pcUX k�yޔ�|N���_��"�-�aKT�Do���O �'ԗ�\��c��b�P�(��$^��R^'��z��\zJ�m�[�آ�۬kҊ2P�S^Ӵņ1�|B7��:G ��O��%�3����كL |���� �p��XK��t�����C^��>�&���^�$IZ���NS8Dۢ�7� @P-�����pl0��<�ܨ���M��ia.v�/h�����f�����*N�jPF5ʢ��"}��ك0���e�����j-�xKZ" 6��W�n�.�.@pm,��R�^���d��ā�^t֘ ψK%Bx��ɣ����-� s�w?��%�й,w�� E���>�\>�/�������4��=[6d�WZN2��Z�hW!B�t��m`�0����٫,4��ҙ���=ٌ�ĝ�&�cv4�~ �A�cveQ~0���bO>�����g:�6����ّ��`"�\!�ĭ����8C��ӽ�c���"�g:ΌC���M�9l�p���P}�暥�.�c���L˱�2���q������b���9^���H���qV�z�s�C�*��`���|����[��{�����������~�%�j��b���S�"��`ͼ��:%eA�2�\�;?_+�{�[0�2]<o0��h�:�� �鉤͕�n�>4�I\�k�ɜ�����#�d)UiΗ��#z�j����Î<�=�Ǐ����*�X�ݮ������oZ�x��vԒ�Ic�t�͒�d�WOv�[�[?�0����eU����]z`�0T�2��3�gyw�R�"��,�M��@���� f���R"9+삄nl�+�@�P��ր�t>Z�Ƿ���Y��t����<��XE� �MƟI*%���a������W��j�k��ި����/89:�J��> 3D2��|��B�� ~.6��� ֡'L��
Static task
static1
Behavioral task
behavioral1
Sample
1bc276debda50c5fe720106ee5f004ce851283959f29ef4ca08c522d63474892.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1bc276debda50c5fe720106ee5f004ce851283959f29ef4ca08c522d63474892.exe
Resource
win10v2004-20240802-en
General
-
Target
1bc276debda50c5fe720106ee5f004ce851283959f29ef4ca08c522d63474892.exe
-
Size
3.4MB
-
MD5
6923507f0c6104b4552da569fc55c34d
-
SHA1
50547337f02cd98c7164afff5aafc039372cf482
-
SHA256
1bc276debda50c5fe720106ee5f004ce851283959f29ef4ca08c522d63474892
-
SHA512
783e85eb3dfebd62bb646f467226abe7ab4600ee23d73ab2755b9d19c2f978b835edec4fd8702b61544a279c62f7c02fb66f13c48e7e7abff3158722eaa40d67
-
SSDEEP
98304:NHzgd4Qw0al8aeKpqv6CjVxthKrL1En5:NTgdaZl8ae1v6H1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bc276debda50c5fe720106ee5f004ce851283959f29ef4ca08c522d63474892.exe
Files
-
1bc276debda50c5fe720106ee5f004ce851283959f29ef4ca08c522d63474892.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 59KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE