��ebq�*��I��*CS�|o�UVyR8�t�����Ɲ�N����S�����f��(Ǜ�е`�~�}+����� �L ukS��5���N�>4W�'�E��P<~�0d8M6��`�Fl�Z�}�m������q�3����=���b=PK�������N�NUy��Z,v�=ph�;-�3^ÒȞ�Y��P�%h�n,�*]lr��<����-7u:���<��K��9���߅&������.K�y�F3�j�K�p�no7��S��T�DF(�x��O�D_4XR���ʓ:m��oa���^�p�YO؈�%������������WD|���^��˶��xc�N��t@X-͆q�V(F�,���cyg홴Ġ��f[Mk�b��ןTt�6/���w���☜w�5���>�f��1(��fE8tЎW�FAT�� ��o@Ds�y>0�6�ļ�S�v\xȶns��_ݖ�#d�-y̙w���S�S�<^U�"��s���Q5� Q� �:3I�!�>�������uE�z��Z��ӜN�w��菟�5Ҩ��>#�A�=]�N�bm�s4��çUk$�9|�ұS�fNקt9_7�x�]��u�_��+Y����b<ؽpj�tbfvEl��u��N��e�i?�K|�[X`�ڹ���T�۶�)����u:�4�K��f�bz�-�H4I�#ג��tX�)���N���WJS���/j,k5�l2�(�Bz"0���mEH�Z[C-����An(�+U�ay�J!��s��>�_n �U-�.�$;�d��d����f�g� ǯB�;�E>��[���h�?h��z��-����d�L����_���Z+������T�v�|�_��N�u��̵��uѤ��V���7;�q�:~�\,��:m�������~al���F��f!��*�Co�<GG�N8@-`0������+�lYQD��S�q��S�*���`�t���_�O�ǡ�#�eZ9q�6_Ν�/'b�\!C�+��ڜ� ge�&bՉ��we�L�?q8�T���¼��&�6�"�'�C'������](�{���G[��|E��n��J�r�VM������Jס��G=2[��r#7���q�/����w� ��W9�t.�4~�y� ������{�7j&��w���f<9�f��R��3���A�Ȥ�[��S:*���}^(� А���Ѽ�? &�b�y�Cٖ�`�J�d�"���45�ע��G�� ���lt�d�x��u]͓�!ύ1�[�`���� ?˘�F���o�ET��.4H��5Ց{zG� �.B$�ap���{��4���ϋ��F�I� u����GQ�����-*\�����qfV M�"�U��$_7����FĜڻ�߶@U\��=/Bb<�ꦶ�xoJ���vN�O��Y�jx�*J��^l�C����Fp�@�_@��Ro�*Зp�����������۠�A3��zk�-� Mt-�P��Me3:s�a<A�-�\D�N��%����Sw��rkc-��Go��ed�? R��{S'}H��}���@a��|��CB��5u�-sNF<t���w_�8����ލ�C��o��|s�s�\妥HrS�����%��� �]�4V��'"�Wth�9d�MNz�#'�`}�O�G�G�ۨ��$��p_g� ��x?'C@����D�w�7U�#Cj���iʔ7V{��8���%S]Ѽf�A�oR��ܨ \&���,���ټ�*�����2J��O.2q��&*��̀M�F�o�s�a���z��e�K2L�� ����\�Ch{�� =+��Xbx�ɹM���W�t`I�wm ���N{%ӧ�7�,tFm� ��EoxH�x9+��P�B�ђ+�z�wƳ$��!��K��G��+E�C�Jr���c.㮾��Fz"�PIN�TZ>�y��7�C�Ӟ@�e����是�Wj?0u��=��0� �M-[�a=����M�`�LgX�X��MP�B$Ea�� �@���� � ��椎l�K�Y�܀^x���C5yB���A��Ĥ�=�{�v�2�~���u2��O�m�tq��X�vfYS�Q*E��ˇ��# ̰�Py����\��5���+��3��|�L���y1|��T��b��'�yqF���@5�6x¼J�J{�K�;�6�1�T�0����4ԉ?�����q>7��9�@��"��*�=k眃�l��� #� �`w����%�Hۍ��9�������c������������Jc=�;:D�2�^�@s�2k2w���E4`O&}}U��ą�3��n��U��'չ&�z������~�8b�x��K|=� ���m5���>P�����9�;�e��8�Ö@JU'yRu�:۷�iW��9���]d�`�Q&5�n<�bq�����_�C�D,���ʳg���j��T@��|�f�"�D��ME�I�s��)L?G(�m��!�R�n\7� �۾B��p�!RX��_kwd��Ш���������I��a�p|b��j�j,Y���L*� ��پ��'\' �|3s�L�M�&n��a��5�i:�@4ZU'@Y�5R��ȴH^�f�x-�pd� K'�GT������{A1���������< �4 ��ѵe�z�}���1�q�n�Ή��� ��q���o�8��)�j �īo����(�\= ��T!b�ƒC��J����(|KQ�ȗ�?�4vÓm�ƹ�V=E�ΔC�4\.G'����4��fE^vK~���O��86�oxT��BT�C��=9�x�����$��Y�� ⺘�e����|�s���;�3p��˞�/��A�98L<�+���������;�=h�K`�̆�OR���_�e��፯�4�:�1^�����8N(l��w}��� ����>ߑ֓������ZG��8G:�>03���M,�@J���?���i�bj �K��n��ƻE>� R���C&��,A�;�L&� ���u2�O��n'G��C�_���YK��z@��H�)�euߥ��o�����-�Dh���#K�7�Y)q�U��E�H� ��o�a�v���>!��J���]7���cԉ6�dX\1��!��W�j�߬~J(�����Ma&�+'�7������`���Y����h�bP����=��2)�5�7[�Giu#'(a��3���I��X�℗�lk~�BY��3�OKn �C�UW ƴe����v|�Y�Gρ/5�$��;n\��0�:�#�ֺ�b����w��~��^ ͐��¸��}����4�W�$���Mu�<7�*��?�i��/��~��,3y�]����˧���Ҏ��hl>X�O{Zճl��A~�x���2�~��G=��?���E �~�֎�B�:'�]�0n[��`4�0GNQ$�-�?�6+<D����$��^����A6IG�gh���U:J�a�J\Siw��Dn��|d`X>9��xNpܰB��V�/֛&B$Ζ��5̅DZj�m��'���$�6�"����ͳ��Z�uK���ɜ��Orr�`!+`��Kz-)�cx��q����v���E�^�~`J��(bY��(XA�S��$2����-E��E�|xK�-� ,������ "���I�,�&Dͥ-��M�Bj�ä�nm��aX�����������0*��T��'�~^���ѭO$v�L�w�T8�ڴTe���Q34#1���8ڻ��<�A�hz}P��������t�m%��
Static task
static1
Behavioral task
behavioral1
Sample
c3daa5fe8ba1c6189730bc9b51f6430941f4d3f8efcc555be0d49b05cb2cd705N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c3daa5fe8ba1c6189730bc9b51f6430941f4d3f8efcc555be0d49b05cb2cd705N.exe
Resource
win10v2004-20240802-en
General
-
Target
c3daa5fe8ba1c6189730bc9b51f6430941f4d3f8efcc555be0d49b05cb2cd705N
-
Size
3.4MB
-
MD5
ec47072c1f276d0b795cc4138bc32cc0
-
SHA1
26902d64bc824cc96977311edf7337cea6375aaa
-
SHA256
c3daa5fe8ba1c6189730bc9b51f6430941f4d3f8efcc555be0d49b05cb2cd705
-
SHA512
fc97dde2bfc7e1400e6f265aafada5fcc6c77cbf2045b7e25f7773155655e92944638bf2eb5fc4889adcc6df3f60f678ea22baaa43d77eaee6c97e4aaf3a4374
-
SSDEEP
49152:yGcUgHlu+aAiEdJPao7tJvKPSFHrQKO9lIp4a0loePfLK39d0i7ZRlNZqi3M41LP:y4gHlSALv7N82LQh9lJaKw7lL5YGubl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3daa5fe8ba1c6189730bc9b51f6430941f4d3f8efcc555be0d49b05cb2cd705N
Files
-
c3daa5fe8ba1c6189730bc9b51f6430941f4d3f8efcc555be0d49b05cb2cd705N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 840KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE