p��aC�=��+҆>Sv��kG03���Z��m�@%��_�����\U|¼`Hp|=ǐ8$�a��b��(�i���q������ �b^F��hTe����S�Y������`�����?z�&\`����KdT zaK�㪾�1 �ɼ�c{N_�.ul��t�t�6k��PeZ7�#"E)r+(����z]J>5Όo�ގ#�{d�0ZT�X�]�"xf����45�R �DW��mv����*9�1wt�� �b�������j�L���^����J��UEj���:d7c�f�)!�.�tvώ9��73�aU�ZVMJp��]8��"k�C�wC��fk��h��qW��曽� JX��F��Z4kt���Jw�g���,���_,}�ֶ�0�8��O��rg����w�S�����kL ���<Ҍ��*����[6�A&��`����� ��C�-�B.���^Z<��%���)i����}2�MZW*��b��+̭O@g� Hl���w �oG������Vڔ�i��}<|D�W��Qg�8wQL��C�z^�� l9��ˏ��T/$�׆b������K.��p��)"�����`f>a�v5���cV���-�2��dn��+�$��rz%��� )a+$�\s�R�A{�5E<�[�g��) v&��[H�$g\��$\������i~ܨ��ء�J�f.Hf�Pmq�����8����� J��_�E�p�7-�Ҙq�y�V��?.]�`@�h��g��7 ��ˢ�~7�� �HDZ���~��/yK�>9�E+= ����$��?�Vp��X�{�Qt���U�p�+�z�k��nV�[�����Q!���P����A ���� Y�+�2���8�FE�w�ٜh1��� �S��Kt����.U�pe���`+7�e�|�h���ʪ����8��\H�(嚝��B�0�_KB-��)l�TN'w�)��_����z��+m��:�^< ~���_A���Ň�*����f44���\?esc��!��LF��Z��x��L���D9�*J���}�P�3���SL}��_��_����R,3!/`�2�Sv4Z������v�1,�pK4::l�ќ[e-��� �����-�DCc� 0��+�R#��Eb��wN|jLӵ�H�Z��GB��|W+A6��$�2��յ��Eُ���=��}Î���� �s����}�S� ����'V�����$�P���w�|�Z��_n�8��X���Mc��GR5�A'>�'^�F�{����z���BDW�� w�pKYĻ��"r�(y���j-��/�+i���qќ6F� �����ǯ�l��Ǯ��ՉP��4�9~A����0��,U�1�X�'���MN��qô^sa� C��;���,�[Fq ��#�)�x�'P�0*����_#j�8�TV�� �,�� �f�p�ㇷI�����^z�� ��F8�����ہ���m-E��h�>���T����g�Q���X����S;��<�� ����N����k�3��A"�x�n���+�l�J��E$�6 ��[<�9.6�%�3��Σ�:�jđs��Dp����́JRT;�]0�|+_��~NF) ���b�$��U���Ida9`a|��7�;�E� l�bS�j�Ya��!��W,��<�]���ΔW�ٔVD�������:�=��'�з�����u�]����E'��[�[��ܦkk`D��z�tSla��F���%CT��P�"�p�sha�c��(��&*0��ر�5��D�E bA��1,�Ҷ�N�(���$�Lb9bz�������r����b��0�#�9�}��������y��^ �<E� WīQ`���4���ހ���c�|h����rZݸ��3������X�Ћ㤟<bs65Y���p��`Wh��o�,�ۢD-��.?�s�I��Z�Ú ������O������*�W���,������J#[1�(���TD�8���Rt�Lp�A�6e@�!���['����,�܅�����/�3��i��7K&H�k���ȁ�o����_��^�A����&�p�/E��gF��bG��j�Y|�R �h��F������l���p�Ǚ���c�{\�kk0��G'��|단�A|�����V�#E��P����r��?F3UZ�R+���&�竵��P�A����w���-j淭*W��]�L@�/V��9(�|>�*�� �j��n{�ռ;��5���d��U�4н�E�ъCQ.�Yh���$q�.v��X�'�f4N��V�����^��8�J�M��Q�T�<W���\��[�X�A����{9���������y/�- ��l�샌&�Di�=[�ۀ\5�O�+� � �#G�7\�a�\%!�1�s�3;-�d��M`��4��G��c�� 5IP]��_%f{~\<ܓxV����aD�Iaf��)n����j�[!�Ss�V���_`�=�ސrK�ϼ�i�p� �E- � �⭲�!)�?�6��J�hn�u�l��i�/8g2�@�e�U%������D�]i����8z�i_� Ho 8��8p^\�{�O�Z\(�=��Wu2rPWR�����P�'��B�7�,�>c�n�~���>�d��T����]��O�0��2��a�j�t��-��=Q6k�d.-ƒ�*���d티�-6O���dć��H��i��r4cǩ5 ���.ٝ.�����T;Ω�Cg��T%zP��1���/I���e#�ؾN_��N��2�mD��p����nL�D��D4w���������ȷx����S��u��*�N��/�]&��0�i�k��c��s6wx�kr:�gb�Y�E¤X�������e��,Թ㯙h�]6�ag��!�J!1{Xw8�\��̴���ն���Xm����[���=ɠ����O̻B�@�P���t� $�{o��@ȹ�q~�H��#�� ���.��8�lP��y��'�u��KIxg=�#}����tG/T�T���3�Zu�,�9�z�a����Y���gN��(Z�*�e���4p&�^�p���8}4+�F�l�6+�c����W ��i�қ�/TP�5���<6Q��)��s��Q��������HqX|p�� <��c���$~��(!wg"0x9`ԟ�ݥ�0��~��S�J�q/S�5D�X'@C�iؽ�5RB�ʥ��c��Ԅ �/����j+<���+������sH�EQ��r����
Static task
static1
Behavioral task
behavioral1
Sample
d75d62bb0baf8ce959eb930a7004426c27bc9ffb6e446dfee2ea37936ee45425.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d75d62bb0baf8ce959eb930a7004426c27bc9ffb6e446dfee2ea37936ee45425.exe
Resource
win10v2004-20240802-en
General
-
Target
d75d62bb0baf8ce959eb930a7004426c27bc9ffb6e446dfee2ea37936ee45425
-
Size
4.8MB
-
MD5
f81baa61892238281a9508f4f176a9bb
-
SHA1
d3247e0884ff7faa450e2a34c9dc465b0d48c0ec
-
SHA256
d75d62bb0baf8ce959eb930a7004426c27bc9ffb6e446dfee2ea37936ee45425
-
SHA512
189f6da4f5a7129fedda83f7add5297365edbcd77e8e780e395728e7ad82a9c7dea1f92bc485228ce810110ca40bd3de30e3939788aea7b1230cfc183dead87c
-
SSDEEP
98304:zGj6mKvRwuveDzT4/7BM+WgfRcnVSul/TCL7JS5h3jdA6u/2uN9:vzZAkFBeV1d+PJS/3O6nu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d75d62bb0baf8ce959eb930a7004426c27bc9ffb6e446dfee2ea37936ee45425
Files
-
d75d62bb0baf8ce959eb930a7004426c27bc9ffb6e446dfee2ea37936ee45425.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1013KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 13.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE