Y/��Ž~��G$;���Ч5|��M��N��+V��g���|�O�������moq�� L�%�^��c5"���E(�����x���� 4z=�� ഒ[��a9#�K�d0� 2)�\����&��h���C��<ף�Fo]�B�78�\�8\��#��YO5i9eF�ug:ыn���;`��H��U�ȍy��e+}��]���̺�u}#�C����} ����<���ſ�3�}C�����_zOF�+F\�tGz i"ԘZr�;�V�U�Sì�k��5ԇ�����|V�Bt���7b�Wί���(:��������;M�?b��3|Gs��A�Dn��|<M@���9��w�?M�j�~H�d�WF�{G�v�"��Zp�cq}�ҟ��S�U;�+��}��l���tfk�j(��n���fca��2�}�Tb���p�_���ԭ���L���A���֓*6;>Z����W%Π������x�S{TT9:D��?�@�R[9��x4� ���i|��� p�V^�-�tK��ڥ���1 #��Pۍ�~� i��+���͏�gEߑ�\B�ך3K�4���K��+;~I��.�ΡF?IMHg���v�.���0 �����ڲ#?n$�6ep��v�;�y�������B �����z����s��X����/��4�_��������HƠ��1k�ғ���y�?.!�Q���ڟ>i�7�A/7/��h����j��((�6F��T�Edm谬�û������`����4�A)3:�Xy/�c6{=��$vX��^�|���(�l�"���m�±�%�����Mx]a �o�7vk`&+�loS���"���f���0�gƑ˭ܾyk�����.�Z����C���ˠx� :}K h�LN�A�pj�q~V �ᶸc��A���d�͔�>B+;�����-�J���˒�=:uz��*&��4a�i�c���T�%�`�o����^3��� u5(�,Gf��[���M��lKGhyi�g�9L`7��{Yp�/�"[��`����U��[)�ܩ�kd�S�ߠ3����{��@r���s�X�N�֪��M�ԏ*��U��U*� 쬵�^J�W+���Q)��ċ�q}�-��Z�"������ �-�G@p>D���WU���n9���N� o��:Ǭ��Цy"=,)���C��z{��?�>0}a�'#�5�o ֘��`d�ؼ�=�5�8��%��z%�h��U�;�g#("'�9��Q�����OD]�4|E�M�F�s�Q�44�X���^��J�(�K�0��d���ԧ_9IV����{���7sLm/4X��&HS��j�MmI�C�g��'�sJAG��< ( �n� {�B-+��x6�������>F-�������n9"��3j��L61�]�\}��7 �����#=���Q�Q"��N��8��� <����T�cręvEC����iW�)�ajQ�!`j��D*ͷ�2x��ݟ�����M�3�w��$��a�A�&&6X�jS�%�ԳJ��}壠n�#N�H��5���i��xC�%�̮שUD��m0(V(�EI����><�Z;>]sM��(������Yp�q� �Z��U���_��r���#�����rQ���_���Z�� ��ݩ�[⽼��;�ґ��R�ߴ�s"�7�x�.}#|���$y�Zῆ�y�\��o���__���b���̜A��$5���/���A���)ю���� �:�M�'�� ^�듖�s��Jŧġ�{� �D�D]ac'���W*]��F���}'��aP�]��%nȉ&�-�C���1��b ����Z9=��Ț�I6�0j���%ԣEGOac^���c�_ZI U�a�YR/�>&t&��\�q�Q➓MT/o���ɨ �#-橬t����&����1���3dR/�G9�DA����ҕY��:r:���Q ]��*���G� 6�*�k$�I��t�d:���$a�s*�0 \���PN:W �� ��h�5fi%��L��A�k�W������#O��1�+���̀+$�yi��^~�@���HF�M6/>hP������*I����������g#/WN���r��E��q�- 27�1�Eh���@���� X����^�}�p삕4�%�]]��b���5�^A~��'��q}�-��Գ@�Sw�ζK�����0k���j���ؤ4���c%۞kd�m��W�?ğ��[�Bn���#3�����"K`!�x����K�X�p{Ϩ�����2�?��Tgk�Ŷ B�:������9<)�-���/Z��ff+�6�D�=����Uaﶰ���ɜ�e��K_]>MF�$��R�/Z^b �*�LίyɃw���C��qK��F݂�F���l������e~O��\��k_Dn0���1����o�;��*y}��)����������0�|m���p�$��v���?]LB i_������(aN%�5�*�ݔ��.t;}��K�5��@������P�ݾ�"g�N��6 H�mS�6��oT[ITr��&�]�/���� '��s���\5� L��`ECý/�p|D:��z��^����Q~�V��,y ���E��lG� �pp��ϋ5L�ӷߥ��J�����,3�>}�I;�<�wm�c�����S����r_�,�Oh�㳪O�� @�z0m��ZP��&��Àˢ��P��I������i�_^��؇�N�[�j��!�>��MY/���!�D;�ʁ>\k����ZA��SW�G��9�jt門��0��ڙ>�(���������/�H�X�}|�r���עtr�?A&ڲ�;��^ni��W�s��v�ZD��� 6�5���r�����c��A��K�+��&��!Rn| �#��T�Kg,;o��L��cX��f��v͔C���p��|D�H'Hn�/����������g�>kb��d��+S=��S-�5���W�l�ಀZ��2��v(���T����D�}vh�5�=^�=�vK�5������$���76��D���[�6!�q#Е�
Static task
static1
Behavioral task
behavioral1
Sample
410ad42c401d2c43db5977b49ca27b24f6172ce478a6d4a20d7edc9e60f25000.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
410ad42c401d2c43db5977b49ca27b24f6172ce478a6d4a20d7edc9e60f25000.exe
Resource
win10v2004-20240802-en
General
-
Target
410ad42c401d2c43db5977b49ca27b24f6172ce478a6d4a20d7edc9e60f25000
-
Size
3.0MB
-
MD5
f11fd043f1263a6f3d92b8d5b3a40959
-
SHA1
a1fc5a7aace39cb0c1de8b01779255960486f31f
-
SHA256
410ad42c401d2c43db5977b49ca27b24f6172ce478a6d4a20d7edc9e60f25000
-
SHA512
a5a43652120c1142db823598c9302eb646265b1b2fed5bed9d92a3485c861ff6b5f7de56a1df631fd6b9d4c6f5b7111e35a51db2e28c6ed7e37c57a601166954
-
SSDEEP
49152:GtSL8K3mO+3LZT06JKFoCfwxpdFx7OFCrPYVGwv5Mv2xplBVeH:MSYym3LZ5/KGdFxBKw2xr4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 410ad42c401d2c43db5977b49ca27b24f6172ce478a6d4a20d7edc9e60f25000
Files
-
410ad42c401d2c43db5977b49ca27b24f6172ce478a6d4a20d7edc9e60f25000.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE