�oDS���֮`"cV3T��[��CN�V��B���t���Dv�}A�%U'v�����/QFYZ�g��V�(�������.̐���F�ٝ���7Op�9���M?����f���#U�\bd=��@0�8/ ���W���gUϪ'X·U 6�K�8�F'���5�. 8�����u�x�aυ�֜gD�B�L<�d��$](_u ��q�����`RR��^�P2Zsl�2G�fq嵖CLc�{�JBf�D��?���HL�s �T��5�!��u�� ����5��: fG��A�����.kr�e��8 ��T�� ^���C�X�=tzKY�a�P�$ru�C��g���A~E T�r�ֱ���ʧ3l�T5��� iK�4b�z;��!"���Z�M�z�Q�,)asa@��h�9=�{����-�w�*sOS����Gr`��s �ꏻ��z��%So(a���܈ �G�Z���5�F�t�/U�2АxZ� ���9��^^�^'x�/7O��?�0֨ꆕ�ey����V��^�z�>E���ʬ{[Q��fgW(��R1E�BZ6p��P�$n��X돯�~����nNde��EwP|�ܪ����!lB�d�C8$��9�ܹ{W��Ͽ���'rR]�����[����>YL��/��G��0K����K��QVS>����=�l���D���Tu�?p�$=� �T��5I��UQ���{�m�^��_Sz#;�[���.-�9����:ν�[�ʁ6���ωС�x��A4�b.&��l�>3q#I�V8Oe GhNo�}�'Zz@��P��d���d�Mq��M���w۶9��2KM"�>��Y'z�����f����=��cbgAhi�.Q�q[7t�x#�����&%�[�;UK�T�����R�4�r<ך���G(c�Ό��f� �E�~�vq�y�h�P�c3#�e����y��ž�S���^���r4_ϛ�2�%�I�w���t��d�gR�r��������*�����T�4�����h��r�jp��c*��-*�c�T]�o��⯮]��c��8a�yq��O�<��3�3 �e eG��z�hz�薯�0�� "��F"⛒��Y�N@���Cw���M8u��]_���P��{s� c����,��g�!k���$�Yf��sj/#O�w�.�g"'5�,b����༷L:I�TZxQb��{�G�B��N�r�j̿$-�E#pg�/Y� t��M�ߝJ�q��AG���DI��i��C�m�$K<Ɵ������ p���Ro��I?J!*P�@�VJ���!8�a��ꆤgUFd���Am�6^��I��:�7X o� `��z�+�\�c�4��r��1)ؾ+�����(��^�Ö�D��Mǿ+��);���S��t��<�ϕ���Ȑ}}��4��1���ӗ[3�8��X�����(%cB^�i��i���,����� |[:X*PM�0�t�����u�HB�?r��V�s�2T���/��� ���$���3�O�~n������-%ܳ�3�5J5��E�|(������Cᵆ�RK����ѼC��8�HV����Vb?Qsh6�Q����;�Ћ�}����ǩ��|�[��|��� ���1c�7��p�$�d�Y�Uv~�6k�X��١<�����?t �P�����k���j,���t�M�و����ށ���H�=K�C_ ���9h���@<6V$����j}X�'�V��������:�k��6�z��O�^b!xڀT�g��}�&d���bFؽ��3���=��v�Ee��j�g�*(D���C-��v� ��2���!�i��_F@�/Mkg]ϻ�/3S�j�@� iӍ\���#�_ϵ?Y '9S���-qZ-�:�U �f���u��c=��觘�\����~5T�O��;�kl� �\�yK;��6�4T)���SόjP(,�%�S�Izq����K� :e������4�6'����I p�E�Gʿ����Ԙ��,�Y�v�ۭxy���|� ��t��<~���c�(��/k��-��xP����1��@��w����>}5F~���ت�"R$+��C�!S�HB�W�2�det$P�ai�ȁ�����x��ni��d��츪P��5B�~q� j�� c������9ב�)78���BДg��Q���j+��Opͼ7X�C��f���W�Sg3��AJ��zf����@ә���܃4ؚꂻ�nDg rw�������n���ω�s��l������,���a+;���� �Ś�|%[�z�L�����^� i�w&M��l�Rr������[mg��0!\������ǟ<��W�_��,A�ec��J|3{{�y��2S�ޏ�fMr�-�T��q��6��/z�n�|J���|�b���Q�+u�.!!��o�:h~ewb���~]M��d���ѯL�|��,z��Q��D�L�c�N�6�x��.����e������Z��]�� 3�X��O`�M���M�����T��f��⢾7y{S���6\Y��rl��Y�a�ZJj�|�a�zOÅ��8小�WX*M�T�Ð�]���z���h��K�t��Q��fu8 �zh����"��I�wB�i��L��j\�E���y�{� �a�7"�=���ތ+k��<�B���(�����7 �(��O������j}`��� �� ����\14����7��݈!:V0�,#�K�n�(�B����U�!kY�if`M��A��z�9�s�����3\-����Ye�'���������%4LT��8������k���xB�`NG����!�92S�3É��?}��=ąBK4Xį��.y�`nO���Dk�ܝ����Z�锬�����aU~�7]^�#���?�S0D�t~��~������`W��3��i ����J7$I@���%ʪ�*�s�=�VM�K���+I=m<HpMu7�R�g/6�zXs���[��g�x�<�,����kN5�&��4�\R�q�FX��z���`M 9�Γ�y�wV%�w^�������`]���vP
Static task
static1
Behavioral task
behavioral1
Sample
10fcac9285f4886bcc99b44ea25dd264ff397e2d488a0e1bc161a950411b9613.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10fcac9285f4886bcc99b44ea25dd264ff397e2d488a0e1bc161a950411b9613.exe
Resource
win10v2004-20241007-en
General
-
Target
10fcac9285f4886bcc99b44ea25dd264ff397e2d488a0e1bc161a950411b9613
-
Size
1.1MB
-
MD5
057da95d1934784ceaaa5b0229538497
-
SHA1
745d0853562bc9cbe964bc100b6cdce18112fdf0
-
SHA256
10fcac9285f4886bcc99b44ea25dd264ff397e2d488a0e1bc161a950411b9613
-
SHA512
505ff79fb6034376de174bb347cc01c2af9bbec9acc270daf41b8945a280dc3d863cb811b3d3f8198bd318d7fbaddf19685cf9a069833c5cdeadaf9ed4ab80ee
-
SSDEEP
24576:8HojlSSKXUne4vmOmU8tpJKI12CiwGo8YyvmWP61TkP6hEW:8H0lSSKX+XvnG/1EPDBvmWPhP4EW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10fcac9285f4886bcc99b44ea25dd264ff397e2d488a0e1bc161a950411b9613
Files
-
10fcac9285f4886bcc99b44ea25dd264ff397e2d488a0e1bc161a950411b9613.exe windows:5 windows x86 arch:x86
83bb99c63529eec9bbe1dfa717481cd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
iphlpapi
GetAdaptersInfo
user32
CloseClipboard
advapi32
RegOpenKeyExA
Exports
Exports
Sections
code Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1 Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE