�.�.sj���b�穀�#�cmTռ��6Ï�eF� ^�fx�?��Ud)���j֪�C8 �< i�۠�\��(�ig��T�����vY�#�4� �Tb����y�/vX[�W��I���E���E$����ت�w|g���0(������!��4�nރQ��<ݗ}zt>����r�[�����]���"�8��C|T<Y�`%� �����X����DG�ځaޮ^�[M��J�,?������9ޠ�����w�,��' ��'��o���n.��T�=�<�c?'�ķ���D��S�/F�<D��Ȗ������[�tħ0'�� )�d�S�B7���[x9=���HV�Z���D��� [u�#�!]�l$���H�ec�M���@�%vy�ND�V��W� 0&���`�]�)*z�'�|P,�!mtM`#�^��El���c�H��P����ڇ�5)�,"��y�f�U�f5?����0 ="_uC�w�1?�ķ���|��(}U���2Slۇtt���ц?n&9~�S��,�kR$&s��&��0��߮ ��Ss�fM��f�W���.c6��y�(���_{�7��Q��Y��6PP��V6��w�E~�|��0�Ч�b-aNld/f�h�:�]Bh2���� ��s�6�ͨƱ@�y�z;B�����@�(t x��� �|a�2�]A�<�>"�*�X>_F��:�1��w���� ����,��}у���'kO[I�����j\�4)��k���а�ޭ�2��5F��9cc�l���jo��+��&&�M��%��,��E �N���R(����E�B����JW-]:]�I��"���Ҵ�x��E{���Q�#ʣy����j�i��"�fD��XJ&����'�}(S+H��A��U�[홀�*榌-�B��_D\��b��˟�RH��� �I��>Ն��݂�`U��q�A6/x��g�r'�͍�R}&3;�U���Hi�_L�(�����;���۩�� ������ٕ�\u5����@9'��^�4�̵�F@z�T83�!˺E�/��� Z�}4]u!�ǫ;�`c�w.g��MSi;�=��Ή\��:$��9�N�Q�u��ŷGq|Z�Y2�$��dS���0�n����=%��~���p��*��eS,��?�BW���c�>��[�Lj�?W��a%�h�q_�����Z-s M�JKB�8:S�u7����#���D�E�X�hd�5���3M_�v�����sk B�u�y���'U�����7�8dg%G}�e4?�j�T?VA ��1�Ȍ�f��:sZϷ���Ə��M,��i����*5�?��i#��cO|T��~��������;���L#��);2���9Ɔ��fֻ��ℇ"/k��� ]x�Q�-2�J����+�Z����Fb��'VIa�d�ϗbz�H ����1�+�}f�jU|'l1���oe>�h� �O-��9�<����u��$C!�����(z�y8Ԝs"q%��x�z����F>�������c�#2�Pv���!m���l��#�,���buR�_~�a4E���.��}@�o,҆MwB��f�)}˵GQ�)�,&c�����̏ ��i��.��T c���-���bGZ|t�B��Y\���4 ��1{���5T�nfu��/J��T�CZ"[�)��T �2J��D�7�5�Z��w��o����mg1���tH�'cc�2��eq��U��^�嫗��j�W����9>Y�������}��%E�~b�r�H>�Zެ ������V�"2��+���%������ ���1�*��A+'s.��L����QkPΥR���� h*8#;`�}f=C�5N���M���-&���NO��U�7W�@Y�B�E�*�L,����zz��C}�7T0�L��ņ?�@=�H�T�o�<}��`�1�4�8��Wu�CN��W�N��2m[Ա�"ĈhFY?�ߞ��|S����>)����szv|G��!w�$+�� {���`M�m ���f�����$�n+7� ���L�=d>|�)Cڡ�W�����l�ő YS���}3��+sM���?�t�m���/��>���Dm�7��[����Υ �F�A0�_?�ǥ��~���PԵ]�/��NS���1�G�����#7s�a���#�F~�v�n1�s6�k�=����ŷW��p.��}0N#�@�*qU��4vu< ��S@�½����R �>�y��P!����Q�$���@����`ޜ�E$��F�z=��m�z��%e���D����S+��x+�i�E"��/�'Z��<P��L�=N�~g��uZ�H�&�U������sJ����V dʀ������e�M����^+YQ�\��v�^5+u��ku��e1hI䈎e�e�6kjz�x�>4Z�+�����Z ��1�3�#�����,�p�.�p�ݒ��OH,|��Wٔo���y��q4NI��� �O� (%Tq������<gK?�D���h�9�GP���[��x�m'M����1�C���X�&%���o+=L���P}��P��"R~j��mu�]� |KqO�H��X�̴�X���z�ؿ�r��S$�0��P�5'���L��S��]Z�S��|>���еp�-Y%v��ѮG��Y@c��?x�Pf��j��5�3��%��20j�ZV�Y�&��b���z��Pi�W�U��Hg�/(�d��zXz��[00U��{mZa��0��X��< ��"W��U��=����1cCΤB91`S9�2��EZ�F�s�6�w5m�� ��l�}ZĹ����-qؤ��cL�diB�|5@B�,Yy[��{P ���kPud`n� 3��p@||'JI^�]-�g4�d��%�� hs�}L{���Qdu2Y^���4+�.�f���ѽ�����9�Y�Iv[��I-�S�\S~r��H���'�2E�N�rQѣ�'��冣�c�U�)nu �Z����������֮�-@̇F����i��F��mk�3�~eϯ�z�P���< �]5K$��h�K�� ם���k`����;�G��+ڡg�H,�(ڪ%{��~�?�)���i3�x�z�#�4�o��z��@��~ ��$�,���ö^��n"_�>̌����τ�C�������) �Z �QE�\0�cl4�(���k,H�&�FmO�X ��,���
Static task
static1
Behavioral task
behavioral1
Sample
4a3e83fd895b6fc3596421ed230c36c0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4a3e83fd895b6fc3596421ed230c36c0N.exe
Resource
win10v2004-20240802-en
General
-
Target
4a3e83fd895b6fc3596421ed230c36c0N.exe
-
Size
3.1MB
-
MD5
4a3e83fd895b6fc3596421ed230c36c0
-
SHA1
dafea632f788a559eff62e9fd8fa3fb179ce0fae
-
SHA256
96a2da0f2b1604cf4cae9c888b1a50d7ea0313416d254ef5721e33d57856be0a
-
SHA512
7b08ca7c75b9ec24b8d73f672d04c7ab908caee4472dd7906cf70be67cd91c92b37c48b2e2fc6380ca418a26f381dbb53347e54e01bc62a8a079cfd00df624b8
-
SSDEEP
49152:N7cXi8sZNR0fi4z4visXeqgyCDOQiS9/TjjB2PO2ARU6GYuU3n91x:N72iHZN+fv4DX3iHdoPO2ARDGFK91x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a3e83fd895b6fc3596421ed230c36c0N.exe
Files
-
4a3e83fd895b6fc3596421ed230c36c0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE