�a�[�cO���ٖy@�-��+�,����k��5EO���Cx|J(G����Pc�iEs�X���$��w�7?yFYc~�pJ��/&�S7�Q�1�b>h?�n��q��p�ѽG-Ͻ4g��6�1�r�g������$��jdq�slA�^ٮ2��0���W��Ϭc0��ۦ�}�d�w��*��Ǎ��7t�'�pzQ �C�'* eF:����� }t��e�x4����Ӈ���sS�u�!Ṯ�^$���~-���t�P����2'���YFvz��O�2!"���|������P_���4����>[�w�W,��W�}c�|I%o���X��V�SNX;�[sT�sj�ga)=�@Ƣ�N��}��$3�2�uwb�V��� �^���;���WT���U��O� ���XU?p��B;�wޟ��#�^l�vmQ/�hStNY�Ώ�:/� *��5�#F�(�iuHzu��ε�|�)$�`g d��-d��~*{�'��c��PZ��ŐiAѣ���a�I���/dZʂ<�}���2�3�W��dEhVxѳ��@_Bl2�lڪ�x��S �r��ruqw�3q�&�a�p�ȏ2��- �>gڥ;������-C�3���UЉP ������%Jo��j�R�F� ��nl��S 4m1U�o\-:�3uڏP�@�:{�!%(������w��Þ��nZ����� ������� r���#kZ�x�D@�B ;�YHi3��r���I��|���(#�|�d��\ezJ�-�>�1��zqu�C���V�Z���f� Z�F�B@;:�����~7���%C��V��� C�2����V�^�����K�z%>΄`�!����R�*9[t�=F�#@����-ᩬ%*��O��ߋ�j� ��� .u <���>��p��LD�Ne^��섀-�!J��:? �>������e��N�^_����K- ~r�Rp/O)$������^d<our�ŝ2sTc�f������d�<�A�|��͙&2x����8��9o��j��L��L]};�;�z��̹ټ��2��;��e(��n_|(.��\�Ą/[w��td�߿�*�����"l��?����_ꎖ�*K2��6�$�֬l/�Tx���٦����f��xD|�����p���b}z���+r��g\����<p�)I_mm����#8E+�x����\U��F'}ϲ.ޱ�����y�ud����#$�`��,��C�Cߓ�Uz��@�L�����)<j6"�.�����O�8ND5�؛�!ZD����E!X$/�,_t��ȁZ�"d������-����a�1��赏����\R�k�R_3�O�쓨j�]Kcn0x�)�a?�֒�Cp3��uY��ϗsT���ؿ/�5�]n�#!�e-o��������o$�S#�8��$1���F�L넢�S�tع����e}���~l��ƹ(��C?[P�3Z���~��O�ԡq�W�_g�^J�����*O�'����yc����WB�@��S0�0����me2Ãj�\��U ��k?֭N��.�׆R��sb~g��ӚQm���%W�V����ʀփ����Iغ���� #l.3�[j�p0��B{�fT����V6�ou|��{ܡ������a�)$��?�}w�H�������ؼ����S�d�����q�U���Ն�b(�a&�w���#��r\ ��,z�|�X�H��W���]{�H��0b?�C�K'v#{��$���H�_����ٷ�#��5J�A%���3`i��[to!s������=��gt�0��!��q�¹#��]wU)��Ƈ��(}��[)��&E�|���{J�_=8��ez�S�a,^�T��x�{�`�-h37E"@}��'1�zX�`�"gn�ȸ�آ6jFG�Y���-f�=6?�R��c�/N���xA��_λ�Y�u�o���H�]���!�'�x"�}G��<hA�ZW�N���4=w^Mw�v���Ċ�e �3M��5 �u�����v5���e� ��1��J5�A������*�XҚ�E�qp����г�%}?��a��˚sɧmF�������I�E�������ӆ4q���d�y����"�;���`��H@��"aH�ڸb۲��nr�4O�V?�g��I>�ؒ���7&����'%����>o���Wp��,ô��c�4�d$�٪�����Y�sî��!-��UD��o��?D�����!�'�$8����7qϬ�l�w�%c��i_�S �)�+V4�:��*Ic!QR�y��N�}��0���YX5}) a~���4S`�^E#}�E�U������e�X��:r�ShD֦v�X�w�oUX���&�����Lx�1����:���q����� �F�J0;��C�@P�_���!����%��x^�ǐ1K�����j���gPT�Hdˉ���A����1������2K9g�!���.{���+%�k'��T.�V�&o3I;��\������K���m�VHVx�t��g$}��̛Q���,�xFA/q4��\N=H�W)��m��h��Xi����=g����l����u�وd�2�J;{�v�vO7�A��D��k4����2���B�<D�ji-e�~g��3���Y���DZ��QY8���������x=:47� H��/�˧���a�Zn��M��i�n����i! ���@����t��IU�w�_��K!�s��,�B��P�5����Oh���� �aL������c���% �M6MQ�}�����`�����~9"�z��q���f�O$Z�?sdn :�/����쵓��zϴmU�/��A�7�އ��2���k�� �`�7��\�D�,�6 ��������Xך�K�������(;zj�璈��@?��YZ�g���?�]���v5aK;�H"oxRj������tM7��B.!Iv��0��r���c-�}��k@�@8�q����'ȷK����l�� ��]�|\�����X�xg���z��Z��3*)��{1�9�i'ij���UM��(`3i�rLj�� �#jѳ�#>�Ȱ�2cD\�����F�����^��|��$&��µ�VHF� ٖZH�/���1CZk�i�g�%VS\��$�J�H���,V�4x��Y�Q�F���*5��_wc/��������6(� �Go��y�{ �1��Z;�H��8й�Z�q�qSs�8����-[i6mP-���e�Nâ)��3����
Static task
static1
Behavioral task
behavioral1
Sample
0918d2a04588110ad5ed9586673eccc4d5d5da7947563d3c926bd719c20dd865.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0918d2a04588110ad5ed9586673eccc4d5d5da7947563d3c926bd719c20dd865.exe
Resource
win10v2004-20240910-en
General
-
Target
0918d2a04588110ad5ed9586673eccc4d5d5da7947563d3c926bd719c20dd865
-
Size
3.0MB
-
MD5
cc827924c612fbf80f587d1e24596dbc
-
SHA1
4f340828e67a33a4fa68de39d222052438c4522a
-
SHA256
0918d2a04588110ad5ed9586673eccc4d5d5da7947563d3c926bd719c20dd865
-
SHA512
ee1dacbe3bcb4a4ae4d616e23cb8d886dd4d9924aab022d368005a1d92b1f1c1ab6056f8b08fba5cce147d496cacd19ec7edf96ec73b2b18a448a0710e84a08d
-
SSDEEP
49152:g343nW5Am/fUyo6UWRpadDi5TI3sieyEdwG301hoC9SBoza0dwi1TXd6:lW5A4AZW3adDil95yEeS0Tomhza0eiVt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0918d2a04588110ad5ed9586673eccc4d5d5da7947563d3c926bd719c20dd865
Files
-
0918d2a04588110ad5ed9586673eccc4d5d5da7947563d3c926bd719c20dd865.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 117KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 10.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE