(,V���F�����X�Y���A��o���Y{&C5������-��|hݧ�o!1�oM�U!=)��t��-`�✓���Q��:v�-7W�ZB�Ie!�@$t�31�lA𣕁Ea���e�~��ܚ��AbI67;/� s�2�F �����o%����Ԉ��7Q��7;��o�!����JC�ϗ�h/ �b�D�b�ص@�@s�����0XI����`�Ogn~p�A{�/qX�a~��%hB1'^����N��gJ��ೠ�d�l#N��~�m_S�O���D:��!�`�T��S���8���B��*�v;V����j\R�����P��T2'��m_5�����|�e2M@�12m�k�3%��M�SuW���=5��r�a@�)z���X6FvW��R�@�e��HsX�6��G�mV���q8�Oʈ�U��o��b��.�D�U���'�`6���3�7�OW4*��i~�kf�ָNK��K�]� �&�*���?#�����e�EF������vIJ���� Dl�S��939�kmA|cS�4E��n�� Ȗ�I<��l��X�������K�i ��]8�, �Ţ�f�*�� T������� WV��l�؎��%���~��z2�g�g��Ϻ��\>&ߙ�C�0��@n�^�1<����c�P'96�M��=�E5v��T9����pqCBR�M��F[�+� �/H��g�����&�N�@!7�؈Xh�"��&��Jt�6�@�Ax�^��#������m7v]�[~/�Q�������\���TS��)s�V ��vQ�:�С|<�fv4I�E���������U��� f�ŘA�U_�U�UsK��[���/���H¦��-�6.� ?�0�CgS=����T�{�k�Ӣ�{{,K� ��@��:yXVͰ��}cJ��|�x��_.}qCvަ�9�����+�:l�e)�c)�|<�2���\��A��o�_t����)�,�q���n+R��E�/l]{�2��Bh��ƊL��2y��Vl��Z��4�B�bĒ�T�uA.��|C���ϙ���f�Pc��?�W�|j����2��;��t���1cХ|��+��O �v���"y��A�[�bu�(�T��~g[]�%&�y��E A��-��~�����K�#OI�y�E<M���虝�����̈́3Q1ݓ*ꉧ5Pf3Gd;ޜ/Z�x,�Q��i�����#��I��[��W�nD�Eb��ZJ &K/[6T2�gGB���1��𫧀�9 �z /�K�A�u+�j ��w*���$EL��\���]?�X���P4������ш�O����?�*ί�?Z�CK�V�A��<����1��c�z�,��]�&�_7�<ρˢ��}+w)����oў�^�)@�=��r�/�U�S�������:%I�}.�FM�*��w�Ez��@Hj+Τ���6b �,����e��=���z��-UD|��VsV@1�y����R��f Ad͇���E�œo���T�ކ�D�q���l�*���p�\�V�Ӷ�t���UP���kR����e���(��������q���F��/��Mg��'�xގ0fbpp#��ɨo&l^.x ��Tr�'����V�pݞ���t�ͳ�?�.(�"��0��o�݀��n��M�K��I��q��T�\D������ڰɬV���gT�(��-�(����krV��7�'��.�:�b��#�ڧ��\*�b�k��Gso0q�߿zy{~H����!+(b����tswh��?�h4��5�i�5� ��Er�F��S��F�ݶR6vcq~"z��p6��i��I�x^�$S]�'~.M�xr�ⅲ�!� ��D6���1G���Sh�<̿gg�Ԣ�§�,��?��]��\�IK�BY�,�,6 �w%櫨�q'�s�Yz'�|�\ҙI����U��n|Y����+R�&&�[���JK�b@����,g�"�9E}6mzM�X�e�gv)iA���w���0ڙnfI )��7�N��J���^ɏ��Y$�p��#���N<�fȄb{c�7bA41R*[N��z�AL��"1�<�P1c�M&�ҕ���eT�W�<�ү[����*@"���]������'�B�{���9�G3��x�M줗"��f~��Opi@e�xO҄�LW(F klo����xg����A2^��l�@�*��[�r+}c���|L��K����9t�NJ3��H���w�>���+��W_��c�=��c �XmK!��P$'�j슯6���l��ͳ��S4 $:���/ѳ��%4%Sܫ��ӻ�6b���u�t[�K���2�H%����t�=}$�[�n�1�_��#���y)z���a���q����)�L+���!�mȭЧ+���&ڃ~�X 'o��ED��*L�)��L�O�5Toʉ�#��T'!�v܄/��h_���<���_ qh0���b�^J��Y�SE�1UeWm��w~���G\}8�:ʊ,���O�j���/�^2�M�r�`�f�уt�s���y� �i�2J�z!]�r}#0P%�p��E�uB{ >�Q2Ѓ���&�نꟘ0��SE���t8V���jo�=u�S����`6w{�Ҁw�R���W�Ѿ R泉en���9�@駄�L���+q*R���t�lX �;�W�L��M[�H��(�l��X6�����륖p��fh٨ aT���'R��T-��G��q �z���Q��mFhOz\<3v�2X]^p�dZ]���G�U:yMM���:�X���L/��3Q&�L�?��Xn{ЄU�h.@=0\������w������.�o��:�t��9�������>#��+��5w,��<�i���1��䛹9pp��s3ó9��pY�N�����a0���ܓ�^UHk��s��o>�.+]v D6�,y���9 h�����5�p=���^cBTZ �!�iG�z)�kma���NfV�>��S�p��|�M,,5a�*q�8=Ca`�,S���l>?O豁9v��u���}-�\�'���1p?)I6�S8n�L��{���Ur�;�����9�c��X.��ȶy[�KI�n����|Q{�n�H��1�V�l�:1����Ξ?Ek&3�U�S|��H��.����r����ʡ=���,�dmgl�F7g ����=�&>O{��!-}��z���&�,i� �0Gg\��N��z���{n��o�K�jU��t�'������ڣ�D�ZΛ��*�;���S.+�Ů�q��)|�����N�|A��#�`P���*c@P*��;��XoN���{�ر*$� ��%���2�h��k0$��I��2P�{�j�@�u�|��}Tٙk��@�酖v+�Zj�݇ۂ��c(��VU����h�v�4�Ml���(�z�U�#��G��(���;a5� mo��䎠w�
Static task
static1
Behavioral task
behavioral1
Sample
4327267c6a49916eda91a87239e17dd70115b38614fc50c15a5882749ed65c81.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4327267c6a49916eda91a87239e17dd70115b38614fc50c15a5882749ed65c81.exe
Resource
win10v2004-20241007-en
General
-
Target
4327267c6a49916eda91a87239e17dd70115b38614fc50c15a5882749ed65c81
-
Size
5.3MB
-
MD5
802238731f289b66017f0d5176cdf0ff
-
SHA1
aed7bebbd3e6d28ab62de6bfb48e8a8df506bd8b
-
SHA256
4327267c6a49916eda91a87239e17dd70115b38614fc50c15a5882749ed65c81
-
SHA512
6092185b0f0a5996a4e354616a91f717085d1bf12ad0da47948ed30d4374fb738988aecf898d11b2b690498a9231908b40ab2cd082065710c0940f01310cdd5e
-
SSDEEP
98304:i+3Vrc5p3wnLBX33nsMR1S/s6+DmlYkpPh5QmePNlC+YV1xGPVLM/ILCRengqL6Y:iwop2tX33nsm1St+DmvpPhreFlC+21c/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4327267c6a49916eda91a87239e17dd70115b38614fc50c15a5882749ed65c81
Files
-
4327267c6a49916eda91a87239e17dd70115b38614fc50c15a5882749ed65c81.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 402KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.2MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 297KB - Virtual size: 13.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE