�}���7�������8;5�.��.��l����`�?-��Mð�=�2��i�!OFmKz��jz���B�b�P�+�C��d��;� �1| ��3z6ҡ�3�X�] ~���sVB��|O�[w��v�'K+��A��Xd�ټZ� ^)ko$��J�w��Z� � ��`� O����K���9��ά|�80�[+���c�\��¤s���B�$ey ��O�#��.�M�AR:��"B!Ϡ�&����Ǵ1�~Վǵ�`#�>�����~�}'�J������猩 ����LJ߲�1eUAp��ૐ����I������"*����4U{u�o�v�#�M�;Zwj����d �5� �?�R���o���� U���~���^y4������ ��aHJ�he�����k��e|�Y����(}���K�E����EC�t�� �����as�)����g*�,�M��UYC�%e??"-U��>N��8��r�'�>R�0��#��c|�eyK�d�D�V�`��ݘ8��e�i�����H�@Ry$;~�N�%_���Z���, >^�:��q%��:b�����E��zeD�o9T):����ޞ�<�7��1W'����~'w��Q�l��3z�o�@Z��6~�����4uh�Б�o0�i�"o����Tu�� !l=�e�%ց���lA��t~r���]���+����������V+����l �M��}TTA(õ��0��j����_�t�8Xy#3�&V�`kK���[�U\ lƫ�%&v@�@7d�3 J��-e�|y'5� >0=��gi�â_U��t�I�XݞҜ2�a"w�5V���1u/��u�a��~ےM� ���LA]� ���wh�ߞ�T��s0o�r.B�Ot�3#���DI���x5���}�t�jh�G�rj(��?$�pB���u诔N ����5[}��p8 F��n�.l�y��8t�G���;N�D�ْ%z�z�d�K<�S������z���_wWD������\��p�Q��2�jl@�� $�"�ĿE<,z���Q�Q�C7�7�ˎ=����Od|{Z&�[-�P�"*��{��7\���/��q�T�7�Zq� Dma#^�Uα=����֝l'���y��G' osS���E�`U��5��hݨ�)��;�ս��NOAـQG�/Q6�9�Ϩ�d�UV�����n��.���1 [T�H(�/��ϧ�^͝��@�*��AӢ��c�.Z�/7%�Pb�s�R���D$A�%�YB��������1�JMj0 D�{C������ks��SJ]yq5��N@�d�+�.�����?���T��QC5c���5�+�T�`?guB���V# ��ߑ��=�B/���D���#7�e2�bһ�^��̾�'�f̱q�^_5l���x_&�ڞ5��gݡ���2��q�M>O�+�o��SA��s�����L]��R�����b��ߴ����d�\�K`!�fu&�W5��]�e��+g���2���b��=�*����٣�x���G3��ŇX[�2s(�} E}DU��̽��Y���c`e�%vH 4Y���;�d�yg�"JK�i�P�Oiq&�ڦ�Q����o�w�y�������g���_��4�ڮU�u�����>VOv8K�h���\STGa?�\}8wt@#}�I��`_ ��� ��t�kM�!ݿ��v���s:��i��yԇWF�/E�ʈ.��� F^� ����%��!` �|U����0���zhc����v)�k��(��bJ��k8�� GO�wB(]��� }�d�� �|3���ul����8h�N��l��pψ]��)��9�8W����/��������#� QW4�S�$����-^�����HRH+��0�Uu0%��c����lVB�1%���O�m~�������M�E �����]���Q��-e���>u(4u�de[�g���M7/DS�\*�d�N�ޗ3�����@�S����^�D|�`\W ���ŷ�caU��#di+��"�\_����4�#·�����R4Œ��� �ϖ�1k���R��?����Љ8+������Q��H[�ɍ&���u͗�{~��}on��}��F���a�iRE�$~5_���S�DLawAq=�p��;� �"�� �K��D}������w�(� �k:�s�9 ������e�:4Gm.4�1{�<G;��$ԟ[En8�D���&�~W.N�H��$U����J�:K��1���r����g��q=�vaf�i"F~��nW�>6�!�\8.�=.V�l���%��I��{��$R��0�.,�iS�����tc���� K�na�����ȍΪi����~�\z����c9\� j��8ɑa� �P�P�E��hw-�50�xZO,G�R(����V�u�dW��+^���4,u'/�[��a+�e[i¶�����Lq��$���[l�`\'�$oS����OAI�����ϖ�o��j��u���zKo�E a��Ɍ�M�����x����Wi� �!���W-�R�+n��6�W ����8�k��'� �> �<����\P4�qI@du 4$�Æ�(o�J=gPh�ʾq��V�����4E++�'+]Ų��:3���ˣ����s6O!�F _g*"���nū�;^}��[&L*Pd"���Yy�N�v��25f���d�1U�w �)!V,��E$��� <WWv�Lo^7!p�Z�6`\d(��}��� ��4x��u$�o�N8��ӺIT/n���|~ ؝�Eg5�O��i;��748&�+p䁦YLиk$��Z�B�Iě��nњm�[�̰?���^��&��4,� �+wL#%7 P��h��yv�����w�yf��)f��Pӧ�G(o����S�4b)N�������i��� ��9̞r=!�:L{\�d�7է�;g��!�b$3�v�^1o���4&%[n+����4�F� :A�������LJ%�Z�3ŏ�b$���|��^4���/�$����*�ΠD�9!������^�i+R���#ʰ!<�]��6t���q5��X$� �V3s3a���M\`�E��0y,���c��N��w���/�8?��sS��'����`{-ڟ�I���iG�N�����q�ΰ��Yy�GC$��hT5��I�
Static task
static1
Behavioral task
behavioral1
Sample
31a88bfa4f33dc600652e2c4c097c7ed148957de612750adac3b96d6b3c57928.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
31a88bfa4f33dc600652e2c4c097c7ed148957de612750adac3b96d6b3c57928.exe
Resource
win10v2004-20240802-en
General
-
Target
31a88bfa4f33dc600652e2c4c097c7ed148957de612750adac3b96d6b3c57928
-
Size
2.5MB
-
MD5
b7d8aab7f2ab2cbee1bdb944843cc35c
-
SHA1
f44abd250a912b49c6340f0b9a1310e15f8ae04f
-
SHA256
31a88bfa4f33dc600652e2c4c097c7ed148957de612750adac3b96d6b3c57928
-
SHA512
18d72984180bb7f04020d05407c69117e396e1c7831ed663e0d509a53cca73fc428a4a2eb9b7d5dcf350754d13bb747e9fb99b58eaaa39ad73062c81077a0f8a
-
SSDEEP
49152:ODTmBJsQYiN1znAzcpowywV/Ppc8+CN4lVzM4TRQhrpkwW:6IiiThdc8+RE4Tevf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31a88bfa4f33dc600652e2c4c097c7ed148957de612750adac3b96d6b3c57928
Files
-
31a88bfa4f33dc600652e2c4c097c7ed148957de612750adac3b96d6b3c57928.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 28KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE