H��B�8m���C�c�)�$��1˛8��tW��4��}.���k����\:&C���[�m�t����� 9 *�m�&�O��ZE��K4�l[J����E���"ė�<��$��8���C3";�O�\��{x���JD�E�O�(�_��q�Z�lo���2�� Nt�o����m�v�xK�aw����cr��h�]�.��xDE�K�P��0�<���3U��~�x�zsV��{�Ἠ��gmlCY]h�5�˕�z[wx=B��%��IrA_e��c�V������<}�t2@������H��`J�w�,{���v�V*�ou�� mմ��}'��|�i`�2����~�d7J���a[�3?Af���u�o��q��ͅ~1��A�35B���Ӌ��˒�qAn����h�ΰxZ}S ���yi ��C"[�@|��}wFKK�� :X��ӵ����-9~��>��w����&<nQ�߽HK$�9;�H��z'� ��� ����������f�d>�����.X j��u�4�KI/�N��)=!�ˎum����@'�)2[��# +3 �C��ᶨ��a�K?�ޫ }�Dm1 b����U�ů�m.��Y�M0�#��~q����rC"�M���=V���|���?ކ�$��d�6i�$�bXԾ����ͻ&�#tDT��K��립D�c,�?^rT٫P#�����Ӧ���L��§�e����HU���GePH��������K��/T!,��^����V�-�"�ٱY]ƍ����is�XB� I����oV�\� ���#���qz]ʽ%Ȟ<�����|s�"=r=˧呯�0-��l��3�yK�bӜN|��#�(�6��`F/*vkp�k��5v+��I����ԬEsː�z��/^�v{J�ӯ}]��ޫO�$LQ��KG��-�t?�CSd�Ä�R�O�dT+����/���lĤ�4~\��T�����Pn|��!��'t9�u����c��7�ʌQ�;߸1��5_.,5���8���GĹM�0�1ʁE���.��|{x�T?���[h�����D肌�oWj�����qY��G��KN'�5��;���I�e��s~�7��fP[��b�����='��gy`��U"� �c}!_���B�|�N��tZ�Lh�_����+A:��M�h��˗ī�!�*+1&��W^f7ci�V2!0fh@�S�d�A_��\�uv���\��j�#Y�%�ۺ4G��3��:I����[z��c�\�Ld���h6xP�1c�[�kɀJi�<�����VE`�YF���G�/9�]����=@ݵQRDf��B1�EM4���S�D�3�`-� �\��"6�\i��]�E��-�3 WQI| �����s��]<rM�lٓ���ōa��L��@SX��j�P&E�X1���(��Np��+��e`�Q]Jo�^O8`����QF�b����<�mJQ� !X)�M+s�C�#��iݽZ�����h>��Q��LuO�t$�>�u�2�������ܣ�$J�������^s����4|e4I�z���LHB��,��?4�*��S���_q�\���Ị�6M�W��r-I�!e�L��C˟p�}2��c�u����)�U��h`�5`�,|���RR4�N�Vк�t�����Ӗ^�*�U��6g����|�%�$�|�ܽ"u3y��֥�|�߲��8 �X3�� �@��_c�%�Ē�3�vX���!�G��O�����p��k�`$���O��}����ٯ��8�!h3%�p1�,�T%�[^U����[�O/�����7m�FAڕ=�2W%���NZY������Ҟ����L �-����s{ ��~�l�@"�f�L�cߧL>���'`�\�������nu�����@U�D�Ǵ��' �~+c&���\,U�����q3�KxC.k'��U�`cү�{Bx�8��3>�=�8����ߣC4Ux%i���3a��ڋd����������rl�mR�.f�7E�}��S���j3�_n�y gɘؖ�����4�)�x8@_� Q��mv��l0u��=�jLO����<�|�������3��ك�c3�:HT�����F�����'p;�8�[#���6��~M�&��r*�to���������#R�;�f��p�g����o8Gw ��w�O�"�Gn����xr@��|�q2��m���\�O���1��d<VL����!�+�m��]'���iۭ� fG���a8����SYi��>��<X!ʥ3�*=^;`]䑇㗛����b�n3> ��,�3;\cwWQ� P��O/~�Y��������ఄ�u%�[��ߧ#��B���:W�1�ȸ���T���b�r�ܗG��|�y���M�c�5*����QPspHGHTrhfG�E�C�ί��c^�ݗo���!-vނS�a�]Lp�m�b�[)#@\����)}����T��Ni'i0W�<<,�0�E臗���OEr0|��/CW>�@�L��5��'���D�p~�{�|�����Z,�1eV��y�`m�KK9���q{G�<i�o������?���Gq�d���R�l}�Z��؆�0��K?՛��N�w�c�>���yN=���WTi3"��u`bay�F.9a��ۓ�� i�/I� ��� �Y��b�J�J8�lE�t��h�2PD���,7�*�B��k85 �u4M�ѢZ��~e��}��6w�.�;P�w��Ê�o��BҬQ��`�$�8�4J\x;\_ܿmo�J}q~���JHu�J� �S���ź)2g:L#9�#Qٜ�z�PQ�ײR6��^-zJ-��ܑw=��#(�Kg!������"G�}�g1��5��ƍS��bD����ѳx\W�g�w��ǯ�p�ݒY������{�qE�s���mY4"Mq(>�\#fU�@�l�?�>q�(��$V���PYG]C+c�*\�����y5�P&�^�p��DZ���P�Bj'wn?��5Tt"gP��r������M��3�O�V�����/8��0�� Gئ���KUW����� ���3���G��[\�5�F�����o>#���!�}T,V�o��99�C��e�/p�ҋ����=
Static task
static1
Behavioral task
behavioral1
Sample
34e22c9eb22c0c0fb09c55b67813eaf2419f80542a49f14d931c6745f41e94f4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
34e22c9eb22c0c0fb09c55b67813eaf2419f80542a49f14d931c6745f41e94f4.exe
Resource
win10v2004-20240802-en
General
-
Target
34e22c9eb22c0c0fb09c55b67813eaf2419f80542a49f14d931c6745f41e94f4
-
Size
2.2MB
-
MD5
2d7a9d3751ac2080b8cc528d8d16b611
-
SHA1
d39a7ce2ba42f37a2b1dada85bc744aa1e45b851
-
SHA256
34e22c9eb22c0c0fb09c55b67813eaf2419f80542a49f14d931c6745f41e94f4
-
SHA512
a11bbdaaba76f1de6532f1f960493a2791b2e39c07286f712ebb103726835be024989db024e6392a201dc37a484767e5f581baf4ca5b53af05d00e7c5e442795
-
SSDEEP
49152:HuzAFN8nHVxMnfn7Xuw9z+pmJ6ifvqB8sd/rq9BrjvJWZRvyp:Hu0F2Mnfn7Z9z+pmIwvqWsdT8Brt8O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34e22c9eb22c0c0fb09c55b67813eaf2419f80542a49f14d931c6745f41e94f4
Files
-
34e22c9eb22c0c0fb09c55b67813eaf2419f80542a49f14d931c6745f41e94f4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 71KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE