϶����67��wUt7~�-�'v�G�MߓE��6J�$0G{�}�s������������f���ts��Ickx3c@��������N�ia�[J%P�͆{�<��,�{;�o=ل�y�,�Cv��� �늠JXr �� �ưG�L� 9�<Ȧ��@�%l��ʥ&��Q����+�J���;���E���B���M3^��-�f���{��|��{��;���X�_�i|kBY$�wX�L>qA���S9jC���3����d\��-������фog���`� V��bs�LJi9\����*����-�M���PR���E���Ѯ\�Ơ�V�r?�#cQJ�T *��,�����@��E}Գ �S��vKŚ d���Q3�yp7�5�7��,4�0^+��d����VR��h�$K�=/����0�A��p���Q;��)k~ľ�|���]�.������#�s��[֩��ߠ��J�nĮk����J�m/�����P^ ��[r�ֵ���D���̟��`R�r�Lm�C=i����_�A�@>j�����FP�������J��M���^�ۈ�=y�$H37�� ~(QG��Y���}��f-��$�2ơ�v\��(àd�Ww�f���[mIi<��U`��*h���ۨ���L���x�M�IpF���oZ���6+�)e�r�A0���Ҩ��p-���?�*��M*r���n9���1�"��ӭ �Ѷ|}�� m� �u��bZ�4�k�l�snSZ0�ͻ��&�Ӣ lq,�ܔ����j�ĕ�/Ѷ�e��y9 5�b��&F��{�>G�}����_n)nS������^QecuӦhPs9��g�� �J��Ѻ+�Q�OK�v �r�O���z�T��!��¹���G���~R�f� �pB�n��f�Ԏ�*���?�������vJ��� v�y$�j�DK�.,�J����G� �y�m��9U����\%��Rf|�`Ê� ��G�%������U������*7SW��6��ǕD��Put�G#�d��c�!S�V4ē�K~1 ��Ǜp9(�d�6�k�|h��C�}���/'7�b�R�_1�����(����n��e�� �H����x!���g���� !y�����ʔ��u �9�g�K���d�uBY<��jq�uj��a�W����,����7����q1�������f��J|��:�s�8��7���[CYF퍊�\�y�8)���e���!َJ�������8b��̚�)�UOz�{��t��r9��h+��ͻK���d�.ʆ�L�2��~��T�� ����*���R[��pD��+�78Y\[��x���[./�� F��Z^v�]����p`n��R���v��,�m���O�pز��d��f֮��ϽAwn{z��&���Hm/�X��Z<��M�U}�"�X!�<�6��o��E3�6Ą�-�d�t" �'n\��-z�^�:���[�x b\y�� 4J���@�4BȤa�Y,n`��^H�H�����1� \5;J�^����{�Xe��* �]�<h���Щ�491�xI�� ��s8�#u:R)����J�U����� ~Ujo "�����凣F�3�A*<̈́N�ܷ���1lGp���g̦4#f�ڥ*6Y����M O����6SK9j~d?VZҿ�-\z\��m��!T8W;�K;&�a�ŧ�N���֊��>m�Bz��K�ؓ��@�@{��d@P���6��5�hJ����ьC�:T�{��)7lpD,k���Tc�8��^`�0͢���o��jM@� �v^�����V�5u^��!4�QsNA�y%�W%�xI"��P}�n:T��Ař)��q�}�h4'�G�u�Q�K�>-F`�S��fr���:��ưm3C%���r]��}ƣ[�lg��x �V�c�^��Z��V"v�Oc칡s�Z�O��r�!�j+k5�nI���V�s4o��`�͚�u���� ��U�&�!07M��*>���7QZ^Zl����~j�Y�Y���Pơ��M�)dY�ཪ4k.gt}mNB��p|�IQY��6oT�� �r�F�.���{�]s3�� ��fD� ����� F��4�i�u��U ~[�e����4E�91s�W}���d��@����s,~\��_w!�5یŐ�M��m�8�b4g�֓�cH�x���\�9Z��uCf�EV]h\kQ]�T{bO՞��ؼ����z)�I���Z�P�,j��(�̎�1�7��� d�O�S�8͜-��Q-���Ʈ��?E��i`���rv o�d���?���;{RvU��(�Ì���]"AiV:S�GZ&��@a���a�8���s�������q�ԫ�-r'��>�gu�n_Y'�a��51>'�&�-��o�[M3���{��� ��g�n�̽^�3�-D�&2��XVϭ)Q2��{E��C)�OA �F�X�2[.k~w�������!]"tM�3�e��z���֣��Kz�<�kŢQc�Lmpo�[�N����nr�p.����L�����Q�|F������i��h>+�_!�yЋ��lEBf�����Ї�9xQc�~�Ҍ�&��h�@���vՉ��u�F��ѳhTB'%,[mV۳ŧ�\%��;E�'�p���Nr���G6�P���㑸��=��%����Z�����1c�1:���9�����~�C��� ��?�oG�^ ��Q!?Q�4�*�#[{���*6f�6t5����O�X���W���L��e�� # �0o���� ʟ�z�\�`߉9��F��>غ"����ۛjP��8�k{Z�:�cݐ�(�}}�5{�^��l�<Ƕ=M%�=f�lZ��ě���� ��Q�y ����h㥀���B��y ��� d$�Z�=��:.e6u&QB��Է/�m�[\�˾ w��ݲ�:���'O���n��eI�͵�P�`b|!ixS�:My(@�ӈ�${�������8q�#W������#�ށn ��]�������s�z9����T7虊I$LeQ[����k s}ڹ�7N�7�圾74'?�����!r������;����}��D0�)Z�]��23"� �+��Ѧ��5+�:���J/K�$(ʻ��ߕX��S�)�3���F��-\g �q�i��r ��!�ǵq:>�.�hvS>i��f��`�pC�!z���"I�K5K�z��E����.'F��i֠���+��Y_1�VxǛ�^�?δ�� �R��]h�j�(���R�m�EiM 5O*��
Static task
static1
Behavioral task
behavioral1
Sample
5ac4e25d430c304c15c9d83bbb5dbef0d290cb5e517bbf92899ddb63fde1e43f.exe
Resource
win10v2004-20240508-en
General
-
Target
5ac4e25d430c304c15c9d83bbb5dbef0d290cb5e517bbf92899ddb63fde1e43f
-
Size
2.4MB
-
MD5
b20d1e84ee4932c0d7a1d271a2c68436
-
SHA1
a0665e1a3f7f678aef6507c4cfc258e8aae5c261
-
SHA256
5ac4e25d430c304c15c9d83bbb5dbef0d290cb5e517bbf92899ddb63fde1e43f
-
SHA512
c063a804c17f80908c564696e44710f916257c7c3ad55f11c86e76aaa92000f09a356e56d78f1b59f174190c6c5465c7eda759303ddd320cf32b02a84d517d17
-
SSDEEP
49152:eTblBDqbYpQvG9NZwcpyx6mRCpbf6/UGmt1wBhgS7YLs/r0KaUJ25i:KblhqbYqv4NKcplm2usGGwBX8LsoKaCB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5ac4e25d430c304c15c9d83bbb5dbef0d290cb5e517bbf92899ddb63fde1e43f
Files
-
5ac4e25d430c304c15c9d83bbb5dbef0d290cb5e517bbf92899ddb63fde1e43f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE