�֡��فT��_��竑s�z �]٫G2x>�$�\rEQ����'��.�sR�S �R�J����쒔�*G�n-���%&3,���o�A��&�SM�I����r"�<�`"µ�� �̀.��Z��c"XA"e]��]�Sf�Q�a _�Ht��*汻���$�0���Ě|�"t]�e��D��L�+Nr�ۇ5��7~d8�ىV�D�:���"N��l��1�2^UT�y�O� �ąv�q�7�(�����(���w_��a?�oD~�Z������r��b.#V���_Qg?#���~^�fS;����+M����O=�h`Uy�)���nÈV�H��$����K�q`e�ŕ���1���;��P~I��M��h�V�*��3��w�!�ǟ� ��8?w����C=�B�#Ymkp�A��)�ш�����\�� �N�x���da����0�����[fTW�O�N��_��� *g��ri�0�'~�?�f�Z������+�9���p���B�!��d(A��o��D/�m��D��,��ꀟ�!w��"���]��?[U�#j�D���J�`Zl���D�x/���}j���� �E���>�bў MlX�0�*��a���h@XI/�p���D�{^#"�g�X�SLձɚ0�� �����|NF��=�g��g�X�J�a����ݽ��f�q1�t�,kτ?i��?�����We�b��Nj ��4a�#���Tn��������*��a���~���@N�h}�^KШ�#�ہMyO��^�P��&j�x�?l��0I��;�����|$��,;�8\��w�2��!A_p���ԇs��ف�`D�C+��^�梄L3��>��@� ZYe�;q#g@���,��Ɖ��ӫ�o�e���%���.CٽZ2�$�w#l=M2�>����6uM�eԤ�9:]�S����WcZP80���:T얎5f��Ӊ��m���K�??�����UU�~L��%���1hq�q}�;<�]�κ��'��| �"à��pҕ�&�G?܌�-FN�5-�q���x"'�� g���� �ͬA�����f��tgG�\���a�������09&x��gq�S��B�c4<Q2��l�� V0�>8�c�v\Em��2���+ ��O���v�)�0 WG���b�\�߭�L��� �vT3z/�7H�/�"�M��f���U܇������Y��L�dTb�\��� ���E� s�����K�<Wk�XL�\��N���]��?�?gp��u��E���*sF��'5�D�K�0`UgP�)��l{Cψ~ X�QP����+��ҕ��?�~����O�|R� 5o3��JPs�� ,0�o9�YJ�2O5V��K��~w���Ɇ�w|�����9|�e-Ay�%���� �kb��+c�"N8��K���C:I��>�q#O{C�h9��c[��Wq����!��/ ��e��PW!��Z?Z�H��CׁpKG����VFF}��sȧ�:�)"�p�6e��ަ�j�n"w��0h]�17tR�g�]Fߣ ́�c�w���c�%���đ�n�4]��a��/�5'v���ͭ)�gO�����F�Ub=T@^��E��룥�� z�:��)���Q��$��mՆGTXMȃ4�����WM�@�����D�$��� 0��3��w����Ԝ͗Xk�L�Ѕ=�����AX�8Uu��Jc�x��n�Kgk�7֢�M���G-��<��R�����; �l��^���e%]"�^��{PX�X�Ѫ+Ad�-< ��{��_��i��HV��Scva��n`���X��Z0F;&�3�#/(L� �}��5I�T���[�֞ƯA�]��Ϩ$fke��m¾%X++^����V�@yӰ����7�!�^��z��'&����4+D���6��#�[�����M?�sr�����/#��z|����Ah�i{���"q� �YC#X�ȳA�H��fģh5�U�:��o�S���D�����T�����'B����iv�W���D+��T�Z�{�bx���j����}u�iX�2���an5#�+��z�R�j�@lE��� 0'�xZ��^b�c�9֎����a���.PȬi��M9���"��sM���Ogظ�<#�ʶ�.("p�F�����;s?i��bD��zT�q�C�3�;��t���p�U���c�}kb3�o`�x�R�z��:�uoIF��K�Uwt���$t��h8��r�@��1.�@�|�;��n�5�2�$m5[�+�����N}m�wI�"B��ro���������g���f��Q�U�.>��Y�X�A�|ɨ(#�NE�-ŠI!rj+].P鿂���%N� ���v;;TW�����ޯcR;�H�+�d��pOU�eHܸ���¢�R7l:�꯫gQ������8��2������ �֍j>(M���,AH�N��N�@������=$�jZ�!H��� ����26��+�@ ~�OϹd��>[zC��J�� $�ņ��F�N��՜�/�O�Mį ���O���tO�jJ��Yz�#�ϟ���B3���/�8�!���|N��爄P�B�I�B���1[{!����$�}�F4����=c$���;���ބ�z���e0���.���^�eH�^���]����&��l�u��%��d5�����LZ���ᶫ�EV��&�q0<`s�p�kXM�DZ]�C+���ʃ��g72� ����MqC�q���ڊu����L9��bs�� �gÖ��!��u��t��=dM� L����o��J/���Xe�����K�T�h��㋍˽@R^gc��ۦ� _,Z ���q��*Y;VBZk��u���M��$\������2�!k���;��?�h���ܞ�����?�Z�%�ߐh/��Ё����1�㉘�WI楅��9�(����Wy h�����x9���V����Z�\��%D��l������.�ř���06Bz�g���D q��Y=ɏ����/-!�E�N��m5x�]�in�����'�@�da�.��k4��Z����-� q i� CWd�&�u�P������qO�����VL���Z����v�`k��i��/����wӪ�_�P ��؊Y� j�P��_���=�.u�):4��Q�i�1�u��`�'�����`?�Ͱ�n(����8��l*�&�m�CB���r�˘~)�#P~��jU�6<��8p��[\�{K��4���[j:�C�x/JQ��|���3�x.��Z�M%���0J���e��yF�E�u��Vp8�oݣ��.�^l=]t'1�![ކ�� ���eķ�jol^5�/���x(����[�!3QM����f�c��9������(�>�vVB�%�;>�w*OE����jm���w�ev�YF�32�q�~O�*�$���Y�~�C��ӎ�����밦�es����R��Z\���������4����f�����la2<�hZS���z#8͗E��n�i�ɏ����`�.X\t������c(�nl�52<���q6M��Z�I���%��c��9
Static task
static1
Behavioral task
behavioral1
Sample
70a3fa139d2dd3515ff2940089372374b329a67128cd74e6e1462cf41705def5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70a3fa139d2dd3515ff2940089372374b329a67128cd74e6e1462cf41705def5.exe
Resource
win10v2004-20241007-en
General
-
Target
70a3fa139d2dd3515ff2940089372374b329a67128cd74e6e1462cf41705def5
-
Size
3.3MB
-
MD5
5e7048b4609ec726fbe200b5174adcfa
-
SHA1
ebea392ccad632e27c306e858cbf9b4dc7ac4868
-
SHA256
70a3fa139d2dd3515ff2940089372374b329a67128cd74e6e1462cf41705def5
-
SHA512
bf4a6a56dc12c01386e3ee19c98e4dfd0467ff6a743855df050a1b5d0891a3a09214a73a20010785b62fa2cb5c87c428227a46bcfab4cb8566400f37e1a103fc
-
SSDEEP
98304:8vZv7W3LIlnnM8SCMbmZKKz5nYfi5iXc2Ey5Htj:8w0lnnMA5nYYM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70a3fa139d2dd3515ff2940089372374b329a67128cd74e6e1462cf41705def5
Files
-
70a3fa139d2dd3515ff2940089372374b329a67128cd74e6e1462cf41705def5.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE