�=�Z'D%keL��K�����XKS�4���K����v �*Ȥ$�ˎ i��eO�2����8�{�-�A���pi�����e��<���=eH�T��$_N&f��n��sW5]t8u�[x���`��Հ}��{��,ٍ��ÿ|��:���"�u����P)itTY^s�M��ҁ��U�~�-��ȡS������5� ����l�58ܬaٚ�_t�X� ǡP�m�VG� �'��0Cj�y{dR�Wy5�Ǽ���e��~�_R$ۓ��������3�d�^����Z��d-餗{�������n6���8nw��t0�����z�"�^yd7]jL�6@1���s�#\PA=�-���f��������Y�����700�d��H�ߗq�p����O�Y�i��~�J�E��u��=K{�d9ȕ� ��>"Z8!����Hڶ��̧p��IV �BN�ڃ�D�g����W[�!/��<�K�6#�?I\�ͭ�Y�����"-�}C��tL���o�s��=�M�w(�� E��!%CW3��>��)�QIb����IN/�P]uE�|��� �;|`NI��u�(̔C��m=�XB��B�e-��s�����-���ߩ-�I2j�,#%�I�s���+qհ�!֫߁�|X����z}B�U'ı��}�M�PA+W��X!E��0�-����~̬�=��6�Yq�^�RfQ�'A��U��&��s�d(L���/&�3�~x�� j>�Uyl�6"�$�Y������A���$Nm���s�}�'"�@;�K?��b؏��|��x٠/a��P�(Q������¹^8 ��k����|&NK�5~S��Ɖ3ܑVu ʯ�kY�����Qj�LS�ٙY��L��.f�M((��4*z9w�j��DM�y�a�8���uwy����Ϋm�{����O��U$�Υ�K��/U4��@|�m���[ӗ�+�y�+���O�$~���=���j%��I>��Y�O���]ˡ�,Pdw�A����߳�Q��#��>�Zҷ�ӫ�������q���8�Z,��2ͺ��9?��,ަb��{zϿ0��bY��� �P�|���i��7��TRh����S&t�N�V�3uq��䮯K�7�m���~F���MgQ����Pݠ#�j�+I,�&䚾r�k ��_ga��P�Aܟ��+�).[�!�x� D�B0Z���zjf��4J�$��|��H ��1�ʻu'��T�W���edp��5��~qO)�3��$���Tƨ|3��Hl\y~�}��ws��L�T�cA0�4S���?�ѹ-~ħuM(3��� �9c��]�az�,~�����ee�_��r����c=� X?�1�1C����$�TK�#���i�P@�m'��qr�$d��J4c�?��z8�g�M'h��m���� |���æ�뿁�s�_����!����}�/�kl�6)����m��I��1�5 ��ib@��,����#�7w��0� ��.��8�<��Ʃ����N5�>o�ذ^_�=�wӐ��Dz��:ɩ��R�:�u~�7�B�4��߈)|�����$�^2��\�tx�,���(9�p`1��5e=g�O�Ye3�>9�����Xیb��?u�Lž ��.��9aF0K��Xk �L�Y�+,�̝��P���������)W��{�iרt���n�N�됫(k^�k�l'�s C���E�@����� ��N+�z�,J����B�G�3���I��W_������9g�gav>*"���:6����J��.d$x�}����%iY���fU���D6�)�!jS{�s���g���l)�����H��T�=�\n�+|�j�('��ao_�E�<�U!�jc��*���I8H���85{݉����]���w�4!�`���2�T0����DiMV�,�N?��3tא�������cFa���.V���s���t�@8���}��;_�T�|��SØ\����v� g�[��ꮵ���־4*�[�~e�AV��f1�-m�c���ӏ��9�h.!�α�f��G�M�g�/��@�=��Y[�FJ��g7F- 6�&���m��Tg2�U�J�|�.Ε��Л�R H�am� k����i]��vw:�\��m��3Ӳ �w3M_�S+R�v*L��HA�ElT��?f�"$�J�PKa�0ou��+�z��T����ES�j36}�l/�Kn�m�}�{��2 ��a�0tmo�L���\�@F��r��(1>��ܳ����J��1����[��N�!U����^�J5�>�������]ʄ 'm"��g����{9$�Vo���w��c��I�`��:�S��S��� �#t�e�йḍ��jo�(4�c�N4�C ~��d&�k�����c���L��L����9W����}*�5S�JF�\���6]�6{O�_��e ?���M��Bb,d"��&�N��WO��N��� �ՇtMrC�$u���iz{�3&��m�;�0&�UvXK��Z�c�g�̅�nb� �V�kʍل����a�+&�+n��fp�.Na����E�4��G�& ��~@��~�R�z��*�y�ɫwª�ӈ�9�98A̓w�ε��k��ˠ�k�lG-�շu��#� &< �Mw� P��ֽ�Qv�Iϛ�T�[D�"����ܴ����E�z�Q����Q �$��e#���j�KR�*��&JD�%�Ɏ����*�.�B�F���Nnb��R"����W� *'�o���sJ8o( to��I�@Z���C[�M�Eo�����H����WW�q��6�L���D��@[p���m���<�N��&����+b�ъ��o�'8t*6a;�#���r�<��'���fp�������0�M�����+�[�n�GR�J�[h>�qc,E+���e�Efݐ���)�7���:������t�@�w� q�N�3,��[�����P���a��#���� n�Y2��Ь�����O_�H�v��J�Y�ܥĂP����#g`hs�����ڴ;��j���%6Z��r5�cئ5� .��ha�Џ T�+c�"=���؊��C�lXq����!O�w�R5�74A�&I���0q�!;�,�G*v�|����,D���wWJ�DIZ�9��)��J�4�������1�*l�����r������J<����]){����@�ׁE���<ݛ8�gM���*���8��{o4�+�CS��x�y��; ~��� V��ߘn�����e�� r�0����0+� ���K%g����yn������ *�DE��.8~N�� H�����2����oP��g�.J�wχ�hg7�Vnf�X�p�4��W��}�����C�+շ���P��D:VD�v>�AIp|-[ި;t����ybn�rG���{�A�>E�L�K��Vs̩�O�o-tU2ǐ�m�T� �w�!g��sLq��v�>�ś�P�[� F�cؚ����-�KoR`�Lˇ*���[�* �
Static task
static1
Behavioral task
behavioral1
Sample
0f3dd40065569d334baa28f67143cec736c0b42dfa265b9034376cadf69acabc.exe
Resource
win10v2004-20240226-en
General
-
Target
0f3dd40065569d334baa28f67143cec736c0b42dfa265b9034376cadf69acabc
-
Size
2.4MB
-
MD5
bc0f1d24f1c98fcd6e2116280b1f3f3d
-
SHA1
af5b3a8688c594f8cea2915decf5dd69ab8af022
-
SHA256
0f3dd40065569d334baa28f67143cec736c0b42dfa265b9034376cadf69acabc
-
SHA512
72fcef84f1e1904049fea465da5c77009bc289e7383dc82c91a7d1b56b0a4d19f220d6ef48ff82e912028ec9906feeb0ae4cf4452d1a38606448d80a7234b4a2
-
SSDEEP
49152:C98LYAjSiVfhX2ecSVE1y8ISJCfCFisH2negHa93NdDKIQx+F:C0jjSiVZr28uosWegHwM+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0f3dd40065569d334baa28f67143cec736c0b42dfa265b9034376cadf69acabc
Files
-
0f3dd40065569d334baa28f67143cec736c0b42dfa265b9034376cadf69acabc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE