#H�;���$��I��.�4��s���G0d�V]��� �bbK��5�N����&~�R�Dh���f��I��t���8�)��ʔݭq�Ti:�ҴE��ٙ��0�'GI��j��`?M7 zZ�=!�6�q=���-�_j[��Q�?��!���k�g���M �Y�9p�+��]m8J ��X�����rq{�C[ׇ����KK,����)����Z> jә�Unp����[_��ƪ ���IV�5+q0�>���>�������J�}��^��Bv�����r�`r�|�<3v!J�6d���&�Q�`6 �!:�lOLsO���nؐ���sɿ�=]'��Nk M���Z�og(i�T�cc����R�P�� � ���(� �l��DYJm\Hu�d%D�"Sn#���=Hf����7'�O}@\���X1��+��Ó]��2�F��! QM@r1�`J�ޙ�(�MP�Dr�:���[r|�������?����n�!}4rϖ�5-4��^���"����$+N� ���3��*8$���M���L�N������`Lx��F;7;t�-j0z@� ��z�i!�] �67����o�ԍQ��]��2�˪���\xO����"�ɹ���lަ�`Af������G6:�&��*������q�/�b��\�=q�C�`�?-���� ����>.0����Ӹ��M4�D�,SdB�; b}1*���y�����M����_O�j�ڢd{���E6�7Q�����fhot8�vO�4V�3���/���c����W����7 o+���h���:)ӧ?|���5��"���:�,G$m�J�� 7������ձܢ''h���� ���U|�/?:Wb�K��)������?�'��L�}x�,J1�8�i�L�%S�3���K��w����v���*�����_F�ATË�7�����{�v�02�&ʒ�Sɒg��y��P�L�o!�dW��S$.���T,��C��ӌ㒍��5����^Rv� � �ܶ��⏍9c��鈡�+|���^i��|H@ ����Q�g~&(����;��_L�{���l���-z �2��R�펹��I�S����߮���G^�&��]���Ψ\��-����įd�u�.�c<�jq�s�����;��}h����^�}��< ���Ao.?�n�1��a@־,З��>t~��T���;Pp�N鶯HO����q��O ����&�!����82��6; �sG���[�P��ï3k��a�e��Y,\�V�������I�G�=@��ꈒ�/�{ê̤*ر���q�v2�?������tC�E�u\�'�җ�u�P���qr����`�x{��b�M W�]i�eV�M5�}�Y��P>FC�����c�K���|�8`�7�E���!0����2G� ���T�.�� ��KRJ=�j����v�[����0�p�����&�u{�xO~�Y�w�~�����F�n`Sw�!Cy\`5�x�$��`d�}\q���O� 8�@�.|��P�eQB 9���iJ<99^��O��Ѯ�q0<���GM�] ���$���]��u6g�����XmzC#��0f�k�Q��=� �j��xǡ��!�x�߬ť�^�YR��J;�� �(�}�>M����=�H�����yH&�9F=1��,���P���H�m������t~��mH?GB�4&K��%ҥ����<xHA��f��������`��X�d)�՟��.���\��\�dӆqRi� (,��߂�=6I��+9]��1�nG�o�[���e$FL��)�Pz�����J?�"Λ܉M�J%9��m �,�����v ��a����l�����M�R]���I\r?87��r}��Ħ��!�� ���U E�&2��etD��]�iq�{.�Z|4î���b�y��K�ɪ@�q���nT��=R{�*|�;3u����m'�yR����/]G���Z�d�� �5W=�`�Ƒ���CZ�����{���;y��/�m���xj���yٹ�!#=�,��P� ������KV�h�vn�C���@D��gX`iK�`P��*Zu�gDt!��1 �lC� &,Dᶃ�� �ZӪ���*;��@�v��\/��Wl�y�\��� ��9��1���S٥��I�Uyi[�<(>�YS�`W���h�:YP�����%˺�%�z;�r;���n4L��(%����K䤩<�̉�l�����#I���xƅ� C���࿚�H~,���ZM^Y�'�l�y��9N�h�J�B�HI��>RA[DU�����b?0�sx�=��_�}ϥ�ʉ.�����I_����ll������n�ϸ�8q3]�0i.�9�E��(����RS�$!+�\S2|�m�#�-�p}q�yZӚ�͖���,a���4$3c���d�����|aq��0rt� D�H&���K�vt��IIEpb,4O� ��r1�eU� Z&EV�h��҄G��� �D '`1�MQ��J]�>�kI�A������s� ��Č鳀Y��Fj� ���H�?�DCKP�V��K�0�sD�,N�"�ԥ=��c�S�~��u�$�� Yy�{���ep�'Y��u�+�RR0ש���+w�]ɶ���5$T]�-[���Y_����֖��U�A(�J��$�g��9���8��o�S����I]�4��U���S ���fۈ�N��f����T,"=��i`u�0d���K���ot�Ͷr)�Elp\*�I�a���*�A���A�vk���ą�|b�O�{�}�4^z�����?>�It3.�_�oc�e��)�s?q^Yk��}��f7�U���Y�!��v�;u���q�������hg_/�A�q�M�p�����_�3���� md.SI�n�Z5"�t�����kv#�N|�-@���Z㐂�m8�ٔ2�Cͻ����~@R����m��~�q"�J��H��� L�K���i�xL��8͘�v�W(���j���tӸR���<��*bI0��}ǚW�j�p`,���q^��W�z�8p&��섻�� �5�U\��$����.gk��`�u�e�G �vb�)�b숻ӚBU"Ȇz+��F
Static task
static1
Behavioral task
behavioral1
Sample
35b5747becd2fc9223091ab26d1c9f50N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
35b5747becd2fc9223091ab26d1c9f50N.exe
Resource
win10v2004-20240802-en
General
-
Target
35b5747becd2fc9223091ab26d1c9f50N.exe
-
Size
3.6MB
-
MD5
35b5747becd2fc9223091ab26d1c9f50
-
SHA1
148ddb2745217097ceaae2370de6664d788ed959
-
SHA256
49c1729a3fe887a53e10b9a84d3bcdf22e79b9180c74ad076bc7038532920499
-
SHA512
8003eaab75966a5ebb4751f813f3f4ba22f350f607310ef54321ccc5a1c09260f8ddee5591109a632abe44d66bc394fb7f7b831f982f50a0a042698569967b1c
-
SSDEEP
98304:9wa1i8U9TFpx6LJHKJKMfYjoxCSHB/TM:9waIRZwHYnfYsVw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35b5747becd2fc9223091ab26d1c9f50N.exe
Files
-
35b5747becd2fc9223091ab26d1c9f50N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 980KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 266KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE