��� �1�g�^��z�F)�U/>bT��N�bl}C�~~m#"w�Ki����Mso���6�Ak�����]���1���_{5h�J� �:� ���?,�@A��uٔ���R�#�1�Ҙh�zr���H# u��Bg�hJ��ĩ|�F>��7��`�Tx�g�SF�.+ۧ�j. 4�YS-�^b:5BA�/:x��.K��(�c#�|!���?ӲWѿMC���焥�s�Z�`��twlA����Z��qV ���j���� &�=���3�$'�����ø�KP-[5I��KYK)��i�����V�CX�Y�$.k8�� ��h.�7}hTA�C�o;B�|�!�l�fp�ʢHA �͒>�[Q4י�w���M�_�ԉ�x��I���:��;b����$���G�VP�V������[����*���`Td=�*���8�o7��qp���GxӁ�RqI"�GB�'�3(֛�;k�˂b�H[P��Q��٤�^-�D�7|�Au���1M�ӛ�on{u��%W�7����K�"�x���ϱ��Z�<�0��Ka���f;�ؑI���3 Z�g�"I�I""�ʄ��:�i�˃jRz�v'c����X�Du���dԕ���� ���ス)>��d�)�"[�S���u���/L�{#�D%=��i�2�]܆���� Y���G��x����A�߇s�}w�����+�\+�s/��R�M�#����3~��YÐ��8LT'{��q�!ܒ`v&9�^�%��C�����y�����bK��!�� ��Q�.��ck�N!0�dFF?��M�h�}�����>�#8~M\�j��t���-ڧ1�IY5]Y�$]�;RYϲ���4GE���Ɓ�FTf7���x/q������0�I��z�snN��q��N���ݾ(-��[4�V��Y]��%�G��4Mڋ�.�A\������j���Ct7#�}�U@��s�^�t�U'��P�e�1�Ͱ�KX�G�XW"�������t����!opt>U�&g��b<)I��A���{����=(����9��с�ԣ2�L^�����w�0`m�/F����.9��;p�C)�3������Ĩ]����+�I,tU��E�& hU�99c)��}O�%�8 os��?3/MWgm/�z���p�����iΞH7}��Y��,Z����)�'�I�����*f�y�E�� ^�w�{W�;%?���)�A+�Ŗ�������`�ԇ�Kl�u��Nd�m`Ay6�Z�6o�J-ФX���ڐ�Je�����^����"#ո_� h�y�Cފ\�p�Vf0H�0w���N�xW�bU�5��,����� ��X���&]�^*���U^�"X�F[ݖ���^�o��������?�x`V�+U .�ޟ�5pٱy�����4���ʇ�\e� �M ��B��`?T��Z���<���ֆ��k�K[� �%�������D �����b���� ^�\�~�D��oں��^ᅲ�-��68��V�P~�;�$��_L��Cv�w�S��C�%0=f� �� �5Gv(��=��8R�T�#��d��u���)F���u��5��]v���*�K):���$�}y>Ye�j|�o��7}J�D� �L��EƱe���+_ AI��.�w`DPe�J���Aw�f&�Ŕ����I}�XH�����y�\�^�f]�2s�y���?��D~������"hûJ�=U��h�r�����������E$vq��ӟ���~9�9I�t^ ���W������K�I�>E��@��w��(sq(�X�#qN�*J�*o��}�X�ƃ��T��J��=��U>�ޑ!�Z��0 eIl�8��o>��u�t9$W1���o��(w<R�qpr�/�n�G%ºf&�3���i��������w��&����1�����`n�1X$����Oz2P2ޔ�H��Á�UKj�o=�S�������?��������u���'T(A���HS�� {rf5���4|D�V���}Ғl5W�]��ye���f��*��V���L�8&ʮr����4t�4��-�>%fc2�ԷV�P��9k2�劾Ϡq݃}0#����릆f9n�m������f�H�% ���� �2W`�� ��L�C��?��(H����W�$��x���}*2u���PG^|�����j~�����j�F�im&���F4Nuyo�'9�X��x�ϩ����5Pk���x;�7�zO��]�G�Q��,k��Z}H��ތV�/�!�g��i�6�B��qb8LB22��+T@{O��\����,$���lX����b�fIdzrî�CZ��DɁ�7AH �c�s���x+�B2�%.� ����[=tX�ۼ��<ب��Z5��ێ� ec C'���9Q�j��hd��1c���z}�?%�C��3�� ��uT� �|���P��1�u���;G�a��q[����-�j�a�MK�/x�A7�;Cn�g��� �� 7�m�𮩇�V�����Bq�j:��S�v�����t�{3�1D�JA7�����'�pQc}�*՜�� 'l���< �~N����yQ��q�c��f*&�2k`�{�[��ۇ���H�k��i i45�qOy?�[Z-{�����@�]u��71���Ql�H��8-U���r����y����w��+��U�5Td�Ļ�L" G=�r�}��O*n�e>�Q����(���h%��<\�T����oC�pV+)^�rS�t�E����Ygk���N$p��fA� m���/1�``)�ަ?~��2��Ű,*�$z����jڜ� �TTL�ۚ>_����vL9g6ُwlՋ�3���`x6F⥡(~C�����f�Yߗ~W}��y=�z����NxǗD�Q�v&�5�U*�M�S�p@n1j�F@�W��{��Դ��:�/S��/7~���I�6�͏|�Eb�a�@��jNM�h��� �c9��8�bG�T8UN��E���X�0�3�`�Uc;�,P�m�掻 �yR���#�nW���Q_�%[���P_D��-Ȅg��� am���ed8�/Qu,��˙�ʉ���Zj,(M���)�����# ��x#{�C���+���YI"fG��9������]��(hp���J����9b&*���Z4><�]!���Օ��]$j��Qe��D�vc��F���g�b���e��GJ��H���6��;D[ą�3h�ͫ�����\/h;��W����n�%�K2N\�C�g"P����9D9�V�T �r��4k}$L�̞nٝ�;f�I������� H���N��$�����0;�����N@%�8�@H����Ue��s��t0ߛ���h��P�>�Z��!�j�ѧ]Nzp��#ۛm�Y�;��x"t��=d�˨������<�E�N#�� Y�:Q;�N�ec �<���Ӫ�|�Wn�y��?gPJ��a��_�w���BIp��ٗ��z�@��2�)z�@9����f��%�Y8����H
Static task
static1
Behavioral task
behavioral1
Sample
92a044fac23c7aaa3a71a201018f5a10N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
92a044fac23c7aaa3a71a201018f5a10N.exe
Resource
win10v2004-20240802-en
General
-
Target
92a044fac23c7aaa3a71a201018f5a10N
-
Size
3.1MB
-
MD5
92a044fac23c7aaa3a71a201018f5a10
-
SHA1
786de65efb3cd91e751d21ded7eca24108c6da44
-
SHA256
c29ef1dda157482458bf2b7a936234c4815bea0eeb9278e86e40af127df34806
-
SHA512
ad37adf80469dd66b0a49939f3529fa2d87c8ead7f619496c91b4ab188cc369588c44534f60a22557990fcf8459e99f280ee4cf568af7129d9c7ace5b84e0184
-
SSDEEP
49152:bV/oAVs1ibOg1YXAmpkcshoFG9s5ao1RoWTRAA8x5zWmlNb4Stz+c:J/oAV/VmpnnMsfqWCxhWmlF4Stz+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92a044fac23c7aaa3a71a201018f5a10N
Files
-
92a044fac23c7aaa3a71a201018f5a10N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE