=�4�P�_9�� yncvC��O��94D��(u;�%k3�2k ��p��5�jY�^,���%z����%�����K������!'��Om���sL��k#2`�vЛ>���qGѱ�G�7�����D��rF��� ���)���)�Kf1h���ZlC����F���j_��oP����a~�g�j��O�ⴳ��}+1 [�S >�s� �)��m@7j�JL�C��hɿ�3b%>��J�7�5,�B� �9 cg2����W&kA�ᒃ��5{�U ءe���F�>t�f����mQ5ad���̯>v;��0�3�co��|�F�� �@���/ȋ�Y�e�ef���%�����6=�>�f![?Vb�����r$[�v�rJQ�:Eyq�v�`�D�ɸ��ot����!�`qP\2�t�'F���B�ds���6�����$���j6 \�9f��13g��"�t �{'���#P�� AԲF�D�W��ݰf�d��s��b��✫L���ݾtf_���ށ����DX�Y�x#��fQm�l^~�{�,F�o�-u�~�5��ʝ �����bu� ��a���g+p5Hк� �o������ۚ WI1��/���yc�1�CW����^����Vp]'X�M�F���� ��=aP��v�krA�p���K;����uO��}�K;���3�L�73��:���� U��1F�����.�\� q������r��(h?�����e�g2����=�8�Qm�P����`�ܩ/���oݫK���Y��-��YőD��_>\p@�g6LH�{2C���X#e�F�=����㶻?�P�a�h`��$n��Q��M�z����86�]2)5��^~��8�J� �ן�g��n%�cy�E��!�]���c@����-ץ|yW���wKe�r)���W|����B�7��H���ZZ ���{wГ���(D����;��[��痦�����k\�q�Zj�8Rl���3_��o��:���{2Bȃ�i�Ew'0B���VJ�`?K#NП��ܵ#���$�m�m0[1�kj��cB��7G��[$�2����]cS̻S�"�fi���{3�� ^�V�*(���f$냵KP}j ���/��i�0 ����}�;,ۡY�H��ոɠ��F~���J��?$1T��^�{^X��Z�W�>�����W����,Ԅe��I��b���83F��5Ð�����M�ȝ�<��u4�^��"N�{N~mp���c�+*�:�.��ny�b1������"ƛ�B�� ��5d[/9��/p��r�/�ZX��@�\�qs��_�K����y���%�>��/;�N�����+535�'*�ԧw������Ms`�C����R�W7p6�T�_�$1��l�48�#M���Ĕi�iR�NV�����_�|�w� 5O:��Sq)�����8��\K&���J6�%)��������qٝ ��c��b#���15 �N�obď�\JL��[�#��i�乄�:��H�ut��J�Du�)w1B�o̘��åM�T��Ķ�W�����l����Bnd�9����#� .�D�kL�(���t���뭃:AnIJ��q���ȴ0���'�r�тN:�:�@��yIy�AL�rڳ�Ź��k��-�'Nx�D@�T,��T-O�W��U�]���{���D8��T)/��X bEO�$dT��_q+Q$�� ���unպ���M1����R@cJ��Vj�yA�U6��ӳ4�������j2�j�����R>H>��x>�>��s�)\�j�6�V�'�2�M���bQy��� �6�'&�X����B��r)����ꥵ�֣�M;��>���p���ë8Z�ʬ�������^E�9��<��x��,��t�k'=�n}��?�І"��P�TM "�e� ����_�|%7K��@���-,�\tq!-��4����e��a��&�)+��ϗ�C�օ�4���+6����n0$&�c'�W�!/�=-O���Oq�M�vT�su��=ֆ��cͽE�_�եt���>nSo�W"�����G�I�2:6V-C�����D��܃v �A�̇�f��VrqpR�zV^�x���5�љ���'����j���]�Wᛣ%l��[]\��,s�ֶ�z����6Q Si����N����$Rj�݅AK�O���q���uFTLj�U�K�M1��k6��R�l�W0�*c��g���b�6Sg��6���=��b�����|��p�=�2J��1���M}K��I����U,w�>�\Ȍ�S$��:��$�Uu�+��"xgDڽ��J�u2����vC������1���4�>c$�h��T�PD�S��oD+����}�GgGHE��L9���OQ�j;�V�r;���08���.�R��6��RKn��N����i3⊰szDp��!�������'��`iDã��܇�¬����!�'{G/��n��?�?dë%�dc��s�'5:ޗ�R�ݡ0]�쵵�̵q��6����A�XU2�����B��|u�$/,�������Dq�>���0���r��e(�M�R�g�^*���/�j�@��� �с/�ό�8����3ÿ���q����m��55o��̛9����~iD�wFA��b�is*]�� *nՖ<�>ٽ(�wS��a��_xXg�!��EUd��G��#ft®��K��la���\��F��T�m�8Cc���%"�'�_�T�ID@~MeV� ��E#Cy����ќC#�(�����XɌ�?]njXh��{���k2�a��O�� �q�JvÔ<�!�̠��7~8���-��E�S��W��A���Jqfhbb������y �h.)=��%:���#�&�㹧�MU|}�*6H�mM�HX��2���U����@0 ?Z�KDֺ�x*�H���@����.`FE�y/,F̺5����5}À�x��/�� d-�� ��F�+e�rܭ�C��[��h�JW�jr�jJW�`�ujԻl=�ez�pHQn[_]1k�!u�Zݒ�<R�ƥ�6KB"����ۀ���b����P �A �H�6��ۊ�������@x�{����c���$�<lݢԄ^�����������E�@3��I����;FT!�PF3O��F�,�l�}(_��X�2V�����}]p�٧�M�;�����v&I� �������'X�/�l�MX`o�y�/E�+�ix� _�M\���;�yݹ�GʍDu���9�繃��lL��m���� �����Fy�o��'<��B�8$g&��51^mD�!��U^+�b��|����0�MJׁ�:߫
Static task
static1
Behavioral task
behavioral1
Sample
8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432.exe
Resource
win10v2004-20240802-en
General
-
Target
8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432
-
Size
2.7MB
-
MD5
8fcc178f90e03d430fb903ff5aaa5585
-
SHA1
b7aef8d9b6583db51783a69940ff014e6cff94b9
-
SHA256
8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432
-
SHA512
4812981af037d6a703fccbb5fc0e95371d942d71c1b04b858a2e9eb1fbcc0d3795ef4002ad9a958be1383e9fdc8ed25b7a826636ed6b226c889f14114caab4c6
-
SSDEEP
49152:IMvNOlJQtju3XaHbSI6icuHVntwv1a38iRvx7SFUgRqfrtjTARI+P5Y:bvNOlJYjuaHbS7kVnKv1i8UQUgurtN+h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432
Files
-
8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 316KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tsvmp Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE