z�yGw{��E�1�~J�xI��¦Ùi�͕I ��ӈ D,e1@���]-�悬LN���243���J���f!j^ہC �� a=.|�I*f���ơ*��N�S��n�5��հ$6~�7�m�4�$!� �!��/W�'4��h�+�z R�g�B�o�8n:��/U��:�����j��,�G�Kv~��g���C;H|��p���V��j$�~�a@$%abH�֦NB3�'��y�Kt��d��[x�v-�f�����n>&��sO��H�d�~����~J�D��1Qt�3=��?�#�r�nɗ�� ��y�T�s6sg�� �����@Mf���>R@C-m)� %|+4��fpE������� ��l�$��_��ߊ-.� }R\�$�8L\���8�p{b�"<CbA�?3�{�"j{���\�(�����Z�n<O���<t̀����]�"R�15��������_�үz6f��M��a�UO�I��d���<Gi��H�R�N�bUb[��C�hǃ�!�hQ�l��i�m�lZU��jI��v`�@���Twu��ɨi��:�I:�Fݾcdb>���bS�ĿJ7l ��=���1*3K�a���;��>߆?�|a�W��4�V5Ⱥ�a�>��}V�|r!�&�Lp�����A�"���)p����rm#��ث�z�F�mU���虓*��x��]���qO��p��:Yה�,�6���1�c\A�8c�pi���U���37���{��{�t�?�.?�72����6�'��]xeW��j���ki���bw勰�uW�3S�VR>*cDž������>m��Gьx.>^qU�`qs�3��u���r�:������Kt���|{�+���_î�,ߒr"�6�=�ٸ��ژX�?ol��n�դ9�G���S����`�L��\"��� R4�>ή������hY��B���,�_O��� ��ȝ@q�Ѹ7��r�������gr��?���6�x_���~��0G�e�����Gϱ��_s87/DŽ_��0��-Ý|����.*��1YG&&�jށPt����sY(�^���NJѶj�.���;��[b��2аjɈ�KF�( �r����5���$�.�m-�&�D�*��8�q ��7��MوIO��&*�h��DZq��¸�㣶��t�����썔��|M�*������_Т�sb�$����VeJ��;IT���D� ����|��M~�F<^��� ��{�x�Y����`��&v��$�OȻ�ЈԙY��ğ�E��4�)2<2��N�������� L��K�c�e�W3����l�.�F������+1 Y��l�wn"���&�C�A��^�����x<�|�G��!�0x?J�Pm������kh�3��k���"��"KA�A27�;'Pr�&�+kϼ��AT�Z�a�w���"5�,Y���=�w>JFh���f)�8f9���ۻ7ƛ�wNf$D�PD�Gt��p�.�؈)��Y^��ϸ�h�ޖ�ՖgHM_|_cv䧦EO�nY��,�ƻ�gT�Q�e�8�����%x�=�O��ן����1CZ�����F!L,�ף���v���,�����5�:v�ٹ>$�#�/�+}�j��dW^��]9���=_��SN�c5�����o|�.��z�>�R�����ǚ�<&>�q�9���U��7/� �^����f&uv��S6.�LQ���f����Nԋ�i�,�@Ҝ����J��L\���J,����jQ�"���*�mi~i@��1���=M��kr��cޗª9n�d�����M�����M���*�Տ`�i�`�����rT������>i�+D�f��A�݅�t���B��n�+$� ��HU>�r�ݛ�)�\!�BY&�u ��Q@XedG{�ıC�o���R�-#WpxvM�]w��H����ߜ�A�Q�Ů)�ÇD��R @�j������ l���4��K��j *�*>�K]��V��V�5�"_A������`���P, ��<��4І�����*�qG�郞���,� ��ˑ�=�z2˪mM����r\B,)��e5� ӫ��3(8��rW�R��Ë֭85�l�'�d-#�vA#;�pnr��1��|.EjLi�mM 1 W�ˮ�� ����j��8>ԩ�U!_�`� ����>13�}�J�p�q̅)[��H���!�6�b^:c�|%K�A�勽?Q�IU�d��T�3�v����m��w� ��+����ϓp���������3�GK�Kuܢa�"e1R����=l�Xj��'���������^��!u'�!H�p+k���h��T�S�Ą �=�l����S�l��U:��Ah���;�*@�qf���z���H�s�~ִv�=%����],���t��d�?d{����u��3 �O�b �!�5�,��C��KNo���*�]��Z�ǖ:3n�5V��NWu�_�Jt�8�rUƷ�PkqxTW��c*��k͖|�`ԠS]� ��|� �G����aш�,�v�h0)~e9�bcO�"���2�č���<�Ĥ+��^v�u#;k?^�����M�u*��l�b`I�a��Yj�r��G��,�0����������!���r��)�=�<#��H2���o��8]|1�ʠ:} �����UNE��n�ܗD�@R0(����2���?\oR�.uj\2���^�-�t��%�\�i6l��+�=_��i���T��" ラyq���y<����N&��",)m�8�ے�h�'�~ 34�:�Ǭ椩Ȳa��2�����C���U����n�K�F'�S̠ˁ��9�ɑ7�¦���Xo*F�:�>K>%���D��+V��ǭ�Hʤœ/�6��Y�.����;���_H�Un��nKJ��Ѽ,Q����MA�X���Z}8��/����;~h1�`�6�P��rӝŚa�~d�^il� �4ӭ�R=�RNb���%џ�dϫ������`�a=�g^�殪7Ǥ(�����xD��?F|6�z�E�`��*ѹ������$�%��3�@����.a��g��0۵X����f�5����w�[#�z����1�_�dY��Ҍ7��Ex��m�I�TVThj荗#����-;�&3<����o����{$�̡}����u_8L%T���4�k䥃}~�[r�]p��ݿ�5>X&L���U��� �����|p�p����{��~� ������l��UJ=�N�uߎ��{]�R��A�a�x�����P�)���0�E��1C@���*u � ��r�qw<m@�cs�jNS �^~YH���W�j؛�K��BW%��ΜG�SD��y,9���rh��l�kj�����A���`�*RlF/��uU&vX�O* �/{E!ѫ��;
Static task
static1
Behavioral task
behavioral1
Sample
5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28aN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28aN.exe
Resource
win10v2004-20240802-en
General
-
Target
5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28aN
-
Size
3.3MB
-
MD5
4f466872751acb3af771b6dba52009b0
-
SHA1
9498ccb89b2266a383d19cf50df146d12dd8a437
-
SHA256
5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28a
-
SHA512
1ca9a8418a708a4f94b6553dcd7574e368a6281f86136f2091707c5ba009466e322db7785d172d3286a4641d88454140830a1f1cc8dc466c3d4ac06dc127200c
-
SSDEEP
49152:mD/2YbJs2RXoxqzjOS5pFy14gtHGZD3/E4in2Pwk1I0ndLRHpEfK/lzZNTha/:0/1iQXoxe/5pu4d3VtdLRJuMTK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28aN
Files
-
5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE