�N��V��5�@#�1�'�)ax�����g U��(O�y���z�+���F�?�AU�Ͽ0�2�dغ������9�� �v-F��;�*S�B~�喰�*ܸN�u?����#�$�����'�V5� ���H�Hί���F z�/aD[��@�'�.n-�ˇf��-�G�h��7Å����T7��-_(yڨ��1��@s����y���U Ȓ�}�둲�S�E�&���S��7�f#x�Ƨ�[ |t���c0 Wm�?Ǎ]��p&i.�(k9'w��?���2-^N吥y�.6�ty<� �A"�M��L��&��_�/p"����cW2���9%DH�gx<TМ�>JLW#��b��E<ݥ�`(E8�=� �̉�!9d�$����W����@�Y�D�sI �&WTե��L�0�u퉽&d7G��7R�*VH�>a��B(����+��@�s F�"Z�E_ �rms�-�0n�*t�� }�߿���%�xρ�r}0���J؛+�{�Xrc��#��T8���;n�ǜ+��xbB�8G]XsK� 3�V-MB�������f���V��&��2@6�X�p� ]O�r���u��A��f�k�mނM�e# �ޘ����d�\jpH4�?g6��tR�R�kt��V�Y�;��5�_�T:���q�Vԗo-rK�����r�������t�[m+ijJ�(cÎ��P�2B�&?����� �5RҬ�`(��Mm8HC���EE�2�#��W��<x��Z����^&�Q�����\��q|�*0"k�T=���l�Wf�h]N�L�l/����yK�����-�Ӥ���|k����c|�8����jfOU-�rオ)"A��R�������uZ���oN���Rd��ۏni�����O�����+k꿘 ��PJYz��3�8#R��Nf��4���m���g3������k�`�4�] ��8�u��,�}}ۖ�9K[����Zc��Dh��A(L^#+h��߹Ǘ�AJv�d��,xq]jF�3r+J���(y�;� �c�mz'?��2��ңE6��@TY�Kx��SL�¯�t'����O�3��[���ի�G��!!o��x}��c���.A�*�L���3�i���SЃ�5g4�u$��'��Bh*�=�Td���=A��۔�fgJ;k"V��\|ԕ!#�C�q���mVE�dP��t��;��� ?�W�܁c2��.�N려�j?E��t�,f=-m��Q{Bo�K�q�NAG���:�9� ��o`����C�ߍ�Rn���(vf����ޫ��j�<5�#j�y.)�|�ͪ�ۊ� e[��OK�\D�9�5��@�=D�"�����L����c�&~�yMӑ���x�/MY=oC���ޏ��C��\��u���<`����W�:�\�[�jrO� �ceX�u.?B�\g�%m���n�M��L��0dE?9`��ov"�X�����>���"�Il6Z�9 ��U��?��V����F���T�jQ�=�؟O���.�6�9Ѷ\�ɪ`�����(�:��j�-�ر�r�� �3�R�W�rC��DHP���&��aV�굥JD�$�j�P�a��>N5��h��ﮦ�9.B �t.�Y=P�\pg_*4:r���8����Α��A��r�m)(�r��F���H��� �8d�K��%z��y���ݪ��*�� ;�<�K���e�t�c0Q��wX�W��$%`lg ��GИ+��⠉<%L�h�1�63�+:\2s��G�e�7���n��!�����l��jMeעۑ:���Ws����N"�1��3]QPo�v�c�y��[4����a�70%K(��V�Q��&���<2h\�h���;�5���˥U��Q�����N90j+}��3�}��d��^˺������nM�{ٙe}Ķ�V�;�6��\q���Z�����A'�!���Ѽ>����Xay��qq;���L E����SQ�F��f/�z�!����h\��!�����*���z���USn����`��ՄB(ƒU���,»�~��:� -I�`T?�$��5[,���%�q�7Y,sG��ː���ĕ��:� .0�CO0�D3Q�k5w�W�xߤ\�c�����~������7�8�;���u�Y�º�r�}�Wjҟ�����Z�Ү[�1=D����?LK� �@U,jbcS�6��>��h��V�i�K{�ٿ�C�����ss��q7���)�������m!��H��"z�ASF���,���-��@y�M�NM���:IZ�(JGk~�I��bs�ۮy��o%*]����7�떘���Ъ�[+/�����#V��ߊ��]E��������-�[�[��*�nY\���Y����i�u�QI�����@�>�V�|�`��]��GL�d;���Kj���t qQ��~E�M���o��\����{DIab��~闻����)���#�7�_m ���St�.=��� �G0w|��"Ȼ�~��m,�=�%S�N���G��Y!6D��&�7~.�@Bc=��r�����oc#ۀ�B�N��YWgo8ѲHl��c[�b����s|ÞPYN�O�ӡ��ޢH�ƜEvyݯ5مU�����ň��Ft;H�^,����VXJ�9����֧c�B�N���p�RE��~+���a��ө �M�*���O���i�>�<l-8�wÈJ뭓|�7���P�G��3R]�$J-+��b�5 @ /n��4ǰ�e��śW#4����+:UUfzzg��C����#�E�J�����FuE�M��3_�2�����T�Z��������,)�Glu���g����lwFoZCl(��H����Mq[,�����J��֓L��F,P�t29x���Ha����P��Q�������R1�<z�`��}����B3tH9g�`wR��)ť��k��>�y�[lgI��&?\a)�B��'�ٺF�%�����1et&�c���� )�� �ɮ$�����)���/M^ }�D}zp��K��4�A4D9���b^�2:[ �v7�L�l�~'l�E;x5eo��l����m~�o炈�r�v:|zZ ��s���2s�/�z7��rK'�k;���϶Z$�P�Cve�������s�j+3Ny�U��P�c�=�kdmm?Ҽ �x:l̫#0�.x,���+'ӡ}�o�k+A�._�vp�� ��%�����̷��������v0��]�U`������CB�u��}��R�u�u��Cw��O� ��N���#P���$A�/�w�Y�pW�r7;iM�ROH��/z�y�*� ��j���Ef�`H�"ksB��;zO����;���vRI��爣��We*F�6Ǵ��l��ԋ�c"z���M�x? ��L�3��sG�C�8�qiYp
Static task
static1
Behavioral task
behavioral1
Sample
8af8027d82c1a2869c10d9f315c38e39ffdfe5599db4ce0e7d35ec55ee42318e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8af8027d82c1a2869c10d9f315c38e39ffdfe5599db4ce0e7d35ec55ee42318e.exe
Resource
win10v2004-20240802-en
General
-
Target
8af8027d82c1a2869c10d9f315c38e39ffdfe5599db4ce0e7d35ec55ee42318e
-
Size
9.3MB
-
MD5
e65f1902abb55f9050af84c0ceef8c2e
-
SHA1
b8c3768878e57a0d4f450f8145c2fe36f7283e4e
-
SHA256
8af8027d82c1a2869c10d9f315c38e39ffdfe5599db4ce0e7d35ec55ee42318e
-
SHA512
6d25371bd7de8f8cb8eb4cedba9918cb429f432d644cc4c60cfcfe27dc9e19668c8ff8b4202924585a8900bc02949d95bfd34018e16b0fb0be43b77e99ecc993
-
SSDEEP
196608:saAFkveEceRf1Rgv29Q5NrPr/p0DW4OeqrB2oNcRbvUrqeJkBqIQ/wk5kj:savvRQv29Q3Pr/WMeq1axvGjtIQ/wRj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8af8027d82c1a2869c10d9f315c38e39ffdfe5599db4ce0e7d35ec55ee42318e
Files
-
8af8027d82c1a2869c10d9f315c38e39ffdfe5599db4ce0e7d35ec55ee42318e.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 2.3MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.4MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.4MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE