�{��h��FE_t�]ޘT��:@J�E�-��C!h�����R��Ceg�1�.|/�-B��~O���R1��^��,z%����ڴ����2[K����P%�p=]I���gan�U;��b�/r��n�D5������g��'�ưBþ�t�ϋ�M��佩9����]ء�ޓ�'��ߧ��+�A R�=�#�ұ�>��'��|��ÉQ�p�9��*F��9OS��������K푣���s��Q�:�"9B�m��@���9l�f�MɠU�G <2�X+}2�5��|I���l��Mz��ɝ�g��w[�צ��ݔ���<��c�E�����1��剱rqx*���P�f�#;O��[���Q`f)�'-�b����F�H�t�����Ւ1�U6��'�P,^6����I�/є���f����?��V`�&D*�:EXy*oR|@X4��:Pe���k����.m���D���DZ������߈gT�~�_6{�'�"~�B-:�X�]HB�Kj8-� �Or�D�B_���iTV��m����Z�I�3 2� N߳a�f��6٨@#'����>����J*�u=ak���+-n�j�b���e,}�� ��v���($��b�����2[���C�vz��-��ot2�D���'O9��1B���2�/�ɗ�bZ���Vqz)��HL�SYD�_�A�X�t#pz�t� ���3oe��N��;[��R-��ù3zG����$@����t��ɕ&�+���>������W ۦ�@�?�8���t���-��.d6���d'�d��*��j�-���Y�ì;UY�8鼮�3���gz�R�G��4s�v���-����<�r��à醅YPa��/�2�H^tY͊���Y��u{r���w�j^��U����)��f0��V_�I5���`96��gܵn: U�S{ګ{�r��yۨq}z茉n�@ɀF[H��+]ʍG6� 'ҿ�@�\����l�����gYF����͚����]�"���u�g,*��x�����\��j�zw)��2ά<=��;օ��=�(�L0ڙ_d.A1E� A"xB5B=u7�m��i� JڴD� �c����p�n��I=i͒49��w�Թ�V���I�{+��7�e����%:Ia���� 肹����c�;�E$�3�-��d5ϭ~9HC��#��`�q(2�=-,�_��ؓ#�׃�'���MC�U��,s�\�2ΫP��u]M�OrC|t�L�>�={=_��6>� �d�cQ�pE� "��,�/�K���y�C<@V�Jg�17�V��%��@�f8?����AmyD�3����,���z�'b^������T��T������ ��u�#1��&r+���ג��K�혆�EԼ�����{� y��;�^*�?Y��º���r��lFZ��ଣ-���a��Je@�ٖ���2�����k�=�;.7�yD�U�����7 �:�I����ilsSNR���N�;\�}˫�c x-��EѠ:y�hq.y#���k��+/Vq��^+�&��d�_�XGN�r(<AF���k(�i�/���9�0���mOXպ�×f�琐I��y2��������ͦ 0�u�,RI�K?r�x��z�5�� ��={|Y�O���Ï�������N]���ac���c��y,n�J[��C<����W��)Sܩ�l�슞<�{�CJ�Sx��������,CiW��a�3 �E���[�HB΅���%��`%�ZwI�����wm�a���\� ���W�����.y�I��=t�饝�������#L��ƍ#�_��;�qģ�NQ*bB�]#0L�S�A�ô��s5/���1x��>u��t�1�e��]�7�����>�2�엧/�~?��^b��߂J���������?�����8��ϗ���Y087�%-h̝�Wy���x���J � �lX^Ŗ����k휽$���"C��0�ũaAý�]��r�ޡ�Y>�^?�5��i|z�&�0s�$�2�͝����]�1d�&�N����U�U�oU��IH����������v���c忧����A�4cߛ«Px_{�3�/ט��vR�r �NU)I�`W������ g�(��+�J��V��P;��Ņ���� 1˖�Xg x�ۜ�ط�j&s�w&���Y�����ʊ<�{t�%��شF�-�Ҹw���Zʔ�[͵O����x���i�E��f���<G�SZs}�X{2�p�Y�t:�ԧ�I�(w�f� ̲k�m�l��z.]v'=��H�ٽ�G�O���)�o&���&/�C��~r ;�ȵ��2���D�}��Iu/ÅVaqaMPg�-O }W�����b)I��?����$�����/��%}#�\��f����xyܓҋ�����ީ�#��[�V0�s��j���Q$�:a6�*�d_P���9p�+�o���PgDe�~�o7S�T�*O���3�i�����}/!���ȇ���<++�M_��s���b}8��z�,���-:�2 @�]�m�� `m�\w��ۆ��IՑk��R\�٥��&���Տ.b��m�+����Z�bEI�߽J�:f�d��P��-3�����G�r��-8���磃��v�}�㙾J�ՏMܔd���Ӥ��J�ܦr8R+v}�S�P��OX٘>��l#��I^��=�Mm[C5�*:��I��*�ӀQ��,��L{��Z�Ɯحǣ�Y1�HW�nF���\i�&�fP萵=��;�53�,ک�d�@�EJ��l��B��09u`��� �Mz���I)v����n/�>�ز�2u����,���>�wѤL5rWc�Ft� �_.mt)�4a]���j�t}��[8�j?��mꃨ'�i�xl�'�P���;^K����<���A+�Ȩ�-v�;_�c�p�"�n�E7�g,�S�_ɛіDvƱ����ay�����>Q�_*���i�)\�ъ��1D���* '��2�8�܍"ϰ�����R5���^$[���G�^�C�j�����?94f�B�ƱX���0�����q�Q7Z;�Q�����F� �ۢ�e�h�d Feԭ����m=�F���|���v:%� �-E�=*�.���$�����>��TV�8�+�uS��M��>.���Q����
Static task
static1
Behavioral task
behavioral1
Sample
c24e0003696b6bd04c4b099ac14fd06ba7d15e8e9318a23271ecf22b1ba548c6N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c24e0003696b6bd04c4b099ac14fd06ba7d15e8e9318a23271ecf22b1ba548c6N.exe
Resource
win10v2004-20241007-en
General
-
Target
c24e0003696b6bd04c4b099ac14fd06ba7d15e8e9318a23271ecf22b1ba548c6N
-
Size
2.4MB
-
MD5
fa33d9c1c730a7513aa937301aea0c60
-
SHA1
f5f3bbacb23fc868945b4c6c726327ff7eb715ec
-
SHA256
c24e0003696b6bd04c4b099ac14fd06ba7d15e8e9318a23271ecf22b1ba548c6
-
SHA512
bf8e797e2a7411f30b93c83c09270c40d1cfa7246c4168a259db49191b7a0b785b556299212ff8ed4c0040205328b731e4780ae32e0d1edf5e5a60bfa74c7a24
-
SSDEEP
49152:GHNEF5i31QNIEALlgN4Lgv9Pa/mqo3j1k+df90wlKLI8U:sOFi1QuEALlg2/3oz1kU0i8U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c24e0003696b6bd04c4b099ac14fd06ba7d15e8e9318a23271ecf22b1ba548c6N
Files
-
c24e0003696b6bd04c4b099ac14fd06ba7d15e8e9318a23271ecf22b1ba548c6N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE