��; _E�/��ûz�#(�j����O%�1��iǺ��Af,�w[_e�|�Co}~ �����Ӊ�S�joxhW��:�! ���q��A|o���"�W��ϔ�R�&�F�~���@g�s�]=��]������5v}��Q~�HHNtu��a�����* ��٭3������`rc�����Ȏ��ɴ�O4�(�<����N��^��c.��)thpt���(>��{��7 �4t�a�d�}mз #�g,�WS�ߪ��.��鬳�� �rcD�:�`�4�Q��@��7R���j�fq����rI��P��-�(PB����<�ok��<��]���'�l/fb��υ�j˲���h�Z��~�� �&[1�(�=cv��נX���d�3�,<�Z�$4o/�Z��8���d�z"��ĭ�Mф�"Ny���� @��� ���w�� f@������k��[��y����+e��0�yB����ɉ���}z���*-�tF�O�����'��h�RqD�nB�C���H��*Ax�7������\L:D�VK%���-v7Ϲ���)l�6,��Wl�^���k���?�c�d����;e(s��u��C�Z��_!lU����}A$g��&ŦJ�P����vK��m%RDz�;s��� fvm�x0�ҜֆV���L�I�H�%�9&����3` �^Ј��3 ��ȡ��J�|F���7�_�Fe��w����J(�u�>�ƯJ0>��yP��a,�{��K,���[�fxx��d��ʔ��N�\7���9���ٯA���D��S��WDB�J�� ��o:���Ƹ�PW�|�˞�����^�n�Go�1h&��C;�YD{�:\K�0����ׯ(h�m���nL}��ԇ��;Jֲ���N�_>tl^P� �m��n�M8�p�]L�W��� p)�y�["����;�s h,�b������5�o�n�ŇT�� M�M?����6��?n6Eo� ��ݻ��9�B�h��".k+Z$�����I;��[��1��d����?$����5����s^Q ��'�H��D�:��cu���خ��>��z�1u[cZ�5�� =2g�$0 ٮӆ3��F "?�ر^�2��HrȄ�ڊͽB��;KJi!<F���gM�F1�+�-f�X�Q�&H�Dm���~����:1�VA�3#�!@j-�;7/x�**z�^�=c���1P��v~��W��kO����G� 9���3@E*����|����� n��kE>��bC�ӂ!�L�ްq�4v� >��8<U\�jz��=���� 1I{2w�@y��I`�a��[������{���Z��c��$ǽ�D�t��:�L��q�I����ҏ�#j��]�&�bL���oS#x���m� �.�uû�D� ,��o}��ւ0��s'�`{]r�[`9�.����,Z_xq�S���[t�1���D%L�*��6܀������T�{��T�l~�B��JBI�����YV�-r�1i��:�gP^�e0��ʋ�ѧ�ݤ)�4R�rWЀ��Lj�� å�JJk۰�ߝ�F�y��4"�}1!��Jrqܥ��8��R�_��L�p�o���M+B��b��,�#��e�q .���~�$Q�n;��HK��1��6_�(�Ol�^ fy�!L^w�}W�J�V��~���E9�q���Ҵ��Pj9�_Z�K37�O����l"����\`�C��qRT��@~0�?�� J(Kq��C�څ=�{��p/���=2=2EPĄ�qnj�vĠ �/f�? `�+�%f�J�N�˦���Y7�pX�^?�%7�{�}�3��W8y��F��ܜX�����Þ��V���x�}���aߚ�E`o����+���R)�%)�i��_'���vo�w������y����ι�ӝ����5$�Nz���}�O�V�D!Ў�ɛ��\*R�Y����o#�ZgHڎ?@Y7V���b���-��� ���Q''⡭�@��+�F�� 0e���?S�����p*xM�CR�68�`[:y�nO�����-Ō YX���!��$ ��3���ɿ�|�ʞ�k!����o6�:�"b �GW��4v�8ϊIK���^5�A�j4� T>Nz�]\�b m�Y�����up5ѻ(� �*<L�Q/A�'mg��'iB(�wNo42��(wK}M�I���|��pq\>�J۷�c���[1-l��a���i�ӛ�=w�Q����M�N3���g0mŎ�9�bXӸ{���β(]|r��>���O�+��XA�b�QOAx'�o��1B���5~��n����5&49��� >g�V�t^N�I{����;u�^[YΈ��"*��.3p�bu��Q�nR)���V��P'6�ib��{{6���\���2����^(U��������{C�K�g2����i�r�~�_��;ə��6��)}��$�a˒=?�ٟF+;��-���J_�n�u�Z��h���/���(S�+�Y{[��Q4��xY�������߇�?�E*4�%�ۑ@� qo������|��A\3S���a�����z��[Z�������ԇհ��u�TLr������=XVX�R<�A5�db�+A�̴1�*���<^]G�+�Ҙ__<h�|1�h��bo�z�F�������� ��_��M���mO-��#��Dc�^�,h�/Slk�Ҋ����]1���7���..�1Ju���J�>�ѕ�3�g!�ʁ,���Df4�0�*i�sB|zF�z5� C�IH�S�A> 巠��(�}"~�-�/�K�Z�Z�n���������Sg8��&'ۛ�j�x0�C�I*w���>4g�;ܾ���VV��A%����آ=�Ň4R�X'���a���H&�G��v�η��^l����WsR;3�I���(-KN��&o�7���������Sx[R�5�i"����e��U���9twA�K|ь�|���f�dW�0��`%��K�������E��_`�`�2p:�#AA�ӈ�h(F��Ş�k��TƩ~un���D?MP8B��[�[�S�8��,��V����� �K�V�\f����3�"�%�ɾ:�^�&)2R�[���tO�E)�l�V[dބL���V�r���8���kV�� ��$�+�q�s��K�]A�r/`�h:;l�����K�}<��j6rү�5H�aJ��9u���ͦ�$
Static task
static1
Behavioral task
behavioral1
Sample
408baebb7cab5e7b2785c480454b4a7119fe16a8285cb903efba43b3b15090acN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
408baebb7cab5e7b2785c480454b4a7119fe16a8285cb903efba43b3b15090acN.exe
Resource
win10v2004-20240802-en
General
-
Target
408baebb7cab5e7b2785c480454b4a7119fe16a8285cb903efba43b3b15090acN
-
Size
2.4MB
-
MD5
f16912fdef7c8687f689fa23e68c6c70
-
SHA1
3bb4457897e7ad165da5c89dda8ac62a2fca55ee
-
SHA256
408baebb7cab5e7b2785c480454b4a7119fe16a8285cb903efba43b3b15090ac
-
SHA512
a4d876de2617ddd8410d85bf4a3840b830ea30d2bfd7795202922dfd24f359436083d614fabdf7db040d22af8a23ef2c0136d324be1f40aaa7789c6b7b853fd8
-
SSDEEP
49152:3rJJqxlVSD/bIq51v3XZglVtQj1h15ti5EsMTxO+HjDSBjukY1Ekzr:3r2LSF1v3ynG1n5t2pyxR4Dg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 408baebb7cab5e7b2785c480454b4a7119fe16a8285cb903efba43b3b15090acN
Files
-
408baebb7cab5e7b2785c480454b4a7119fe16a8285cb903efba43b3b15090acN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE