�D����e�"��18$�W�o�x~���Ǻ���w(P`��O�^��uA�ц�Fߨ���`���I�Q,8���e꒬�R�-�Q ��,�eľTA�>W�qס��m�Zsy�\u�~��{������PT�����+�no���������Z�a���4�8�����&:���|c��r�M��l��m���t,��6j/E��lZ�f�y�X@���|~Fh,�X=џ@R �:1��$�wBq�Yp`��]��y$�=�d��J�=%B_�$'2)y �r&���%�:1�*�k��%����僄�"�g�Փw��<-i���D���S,���w%�,`�Yۅz6Vx~P>1{A�lpG�l�l�'z.f��&g=��q=������l�E�������=�I�x纭��v����gO�����]<�[T/�>�4�w��-Z��C���xh�,����k5�}k����K�,E�v�G�.FA�w�Օbj�m4�r9�'|�H���!Ou��S�GY5����^_��&�����A��%4�[� :�͢�hX���S�Z�f��Ļ���*���ھ����R��Y����N���L�c���1J�9�i��J�<-����� � �Z�6��q�Q3֊�C,�}�&o2��������$֖��:���&��(nx뽨���?u�{���և���=������?���,��=�`���K�������n� �Ħ����&.��a�|�1 �^�e��x��9�nN�Ȉ��sx���w�o3DF���"�K� ���n &a�B����[��-���7z� �H�6�P��.=0����2`�A������6��m%"i|e�s��B}�-�딂��1�,�)>��t}Il�x��M *���s�C:�,˟v�b�8��-� P�O��.��1���]P�9����-?���tn n�:��/������ ü��Ҭ4\Ȫ�षi���9�dg⾾(��{с�����障E���x�yk�X}����nm��y)��4���t,2:d�Fv?�Ԋ��D#��O�-�8���{/���ԝ��@ ��'�Nxm��K��#4�\�����"��2;�O���L�QvV�5����Py��y �|���i;s8��W�h�?�R�b08��5P�s�ɐ'��Bj'ȫQ����%���1A��*O�nN�oc���5TzbOv���j�_eV���� ���L��r(f�(�~��~�і>�`�h��;�ū� �w��Zh����VO�,+Sj'���ew̩�81��}�lz�f;�ud����G�@㼁���:�2?5�#�y���*�UW;jYm�J�5���� S�B�ڝ4��� ��/�,;N8���D>�쪾)t{,�� N������`�����WSRV�P��N����Y �Wm�IddE=-HO �a�@��vϏ��;~rL�9����aL�ԐQ��y9�w엪ZRJM�sJ��p��Y��X��wh�����^�s�x2*�f�H�����H�g���l�z��u�N.ŏ�K��DvªQ���(.J�482��_�����k�>���4`�zڤ�A�[x5_y���U�wH��!�����Se\�Η������H��M@�.�e^�V�e���q7�j���u����Al��gşX��5��h�ļ��,"Ɩ���S���h ����0X)�2�;�_g�̄�۾o�E�4�ѻ�/!������꣬�Aj&FX/4��مˋJ]F,F6쾛p[����ݿ��2�T2�<�IZt�~;Oc� �9Ү|��2�;~a�_����������9�^Uc; �U�l����� X�o�7��'t/$�E�����\I.e_�Y��xBL2`�RS���#�a��rO�-��ai2ɸѾ�#�?f��� �pα������ Yΰɯ ���X�t��3��Ia�sS�%��<Қ<0�6�-ޱ���c��5Ŭ�~���=M�nA��o���;��D�TD���4���4"ȋ���J���c�7cqp����N�y��U<�._�� �W@���*.�Q��As*@a�ڲ�!r*�An��0�� Tf��ʔG�!��M��E����-�Eg���N=Eb�?#j}���ә�s����I���eBq[W�i����@�+����b!��(vzq�-db �8�훠��%����a4�_dZ�Q{�$�.H�G1�5�U-���I���=%Eԁ�l �@�2A���=K�[G�n�譈�bS����u�'���GG �,�t��< c��q���H�1�)H'z?4=j6�b�,�����s�h��B�>?={v ���Lj"�{-��ܖO�/��o��w�qx�3�x���aa^�E�K�!;'� 0Ў]Z��k|)}���N��J���35��O�T�]�8�Ӻ_�5͖@�D��F����[;���f��x����+98A��u�#B���ո� ��<j�Ӭ�H-l�� 4:�o��gQ�^|�`s����͋E�y�$Ss H6�h�)�i9TI�0�V)��S_6�Y�2�4�����PɎ��t~8}0O��.{���6TJ� g�L����F�!��5�yg5���� ��#����̙_dCa6�^����nH�<�8�{�o,���M<��~1V��9��!C7 u1�Tv�]�1Ck��>��T�z;8�5��ò��5��]����j�r�1� �����1���8���qNγpqԃ��9������ru����X�{�eX���� �C��T��wzh_R,���#;k�ÿ���9P��Iʼn͆뢌� b]v� ��:n�x�����#���G�(n�[U�-a�ᖢc_~KCi�rp�x�ai'�rPLd%j�)��+�<ȏbfM�͈rE�,,�^����N�\Z'�xDh���ݡd���2��I�g�=�P�%=?��,�����O��J�x��*�y>0�-�Q�w�U'؟�2��ϊF�9��F�u����Hz�S�c��(���2:�W��e���>�x%Y�(�s1;�tv\��iӾ'^y���S`}�e��$�a�$�#��\�'��y)���{����=ӣo� ���VE���Vp7���<Q][] k��j�%��ol���^��Iv&p����W>u�ĵ��}�37�U��,��K� ȁ��5�������#��1�J2}�5���,��BP>�n �U٨�!������))�� ]�m[tETL)%�^v�j� �mJ�����u)�Rަ��J��>�d%w������e}�a!]��2���;q/������&��5o�TΈ���ei��Ùƿ�ŮZ�(0_�j�gW�&�[��-x5��ƱY0D]�! m��#��u.lP: �mM����a��@j��)��M#�^Ȕ���w�FC��Od7��U �� e�[�4P�����X�K��ca�;��'}Ԭ b��5%\�5��!r��՝�S���`�D{�7��!o1���Q��F�L�v�}< �Z�A�<DS��.^ #�nJt��(���ޟcX����%O+T�b[�M-�ɨ��f����ڷW��Sg���|��`��$}���8�B#�mo]gDNΣh�/�� ������`����-�o��3<<�Z��At~�2 �VU������6���{�ߓϕ��7����ظb���fIe�D
Static task
static1
Behavioral task
behavioral1
Sample
2d22961e8db6efb8e2252962ada58c145c3e2a2870e272f74e2ad8d41d54344a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d22961e8db6efb8e2252962ada58c145c3e2a2870e272f74e2ad8d41d54344a.exe
Resource
win10v2004-20240802-en
General
-
Target
2d22961e8db6efb8e2252962ada58c145c3e2a2870e272f74e2ad8d41d54344a
-
Size
4.2MB
-
MD5
74e60958af3c2ec5d2211df54ee8254d
-
SHA1
2fe11960a99081272a85dc8d973614bba58da592
-
SHA256
2d22961e8db6efb8e2252962ada58c145c3e2a2870e272f74e2ad8d41d54344a
-
SHA512
f2ea4ae32a762486f818a6f9d25173f3f99c057a6dad4cfeb483f7060a528e50d6dfb7d6e2169a65a01cd32b08e979ccc05250a3100507901734398ccb58fbe0
-
SSDEEP
98304:IS9E5kFcXsJVnm0zdHN32ELkjQYBNx2tU2Zr0huVvtL8U4VdD:te5kFcXs9dtmckjQqNxbyQygU4Vd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d22961e8db6efb8e2252962ada58c145c3e2a2870e272f74e2ad8d41d54344a
Files
-
2d22961e8db6efb8e2252962ada58c145c3e2a2870e272f74e2ad8d41d54344a.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 592KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE