x�:y�2ʇ��g+��S_\�FWY_�ody+��z0݆_Q��k bLC M����1]柸����{��.�� ��^����;�j_�� h`����Ծ8x�b�@��MyIe�m���{���1z�F��$Õe�q�:�f�nb4�M#kn�)^+��i P�����;/DC�@�bl�"J����^�y��Qt�V�~�*8�����=��G����Ǽ��k�9���#V��i^��1�>��S���k���U<w�֧3��¨N�y��#X���)��_dr%��<<#�t 1��y���E��� ����Z˟E�;�t�pA�F�w�A�s'�{{����j/Z�B�� ��"�<x�z�mv��߱x��7�C�?�]�1,�9�d~�E-g;��~}�#���L�t�P5~E�o��z��e_����$��;�Z�����2��z��! �}���F8���e����uBn�������@��-���3�R_� t)AR��6� A�~�|~U����Tsظa���yd��)���+�4�a��6�"mF���Ob�j֪�e�弽 �f<��,_n �� �OkX����J��Rc�8�Ň��z�|�6��_� V�S�>*0k�Έ��`9����_C���"��D/"#�ß�#���Ֆe�#�O.~�f|r7�:��c����X��zA5��Y��Yvgh8/�K�?��թs�$.��T�L�}n2��_��A�{(����q��6&�_/��p��8(ɋ�c���B�e hV��<`>#pK�{E� {���T$�a�H�IԽ�s�Lj�C�Z5�l ���Q���̜;��K�����q��EQ����&�$��_%����蝓�SY�G:��Q4�jN��Cd����x&��_�>8ϧl}�y��3 Η��@��4���a;�9Ieb����bk�w��A��5��́_)�w^Ӳ�=�����!O�Xcpy�=��Yg��>ȴY���K�!�� ߆�<d�� ��C���\n$B�#w�������;k��F8|��[�?�������*�af�4\��� ��X+ڪŇ��HU������%9S6��p|Y�D_\�NjO�b���P����X�6b⌿��� ����1�Kr^�ذ����n��s�Hq�����l���G[վ���Z*n�z�������0�� �)�Y�R6+���B�����{ѬQ�W{�9VH�D�0��Q�?��@|n�D� >7�aij���P�˚�X���3��p,<ȼ <�n�*��B��4�֞8k_�{��B%8������ZdHte��x��)�UzCEc��= k�Y�����o;`��so�Ȟ����I��Y���o��I��^`��F�����3;,.�ma���>��`ƦWX>����?gB�/�?F��ݍJ�������> KfPM�~L9�pҧDF�R���~� їH -�I��D�US�njiY�>��r���P(a; �/�g��:�M;�z��J~�J,�����(}��k>ڷ5X��L_���������Պ�-f@�鬡O��by9�){>���"5�qE�A�U�d��Y�ԅy?#�,3 ���m��~8y�A�F��/:�#q�r�����CK3������2����<sLmZz��6�@��+5���� ���Ҵߥ��G3N2��jm!���;An���/�o$��φG���~P�@_�7p�}�L��`-���k��M>!��~��f��u�qQ��&@ M�=�g��X�w�TI�5*���X�K�̟l�A����8���n�zs0-���&T�N��.�%��ˋ��ʑ�lLg���戚5�R��l�g����n�$�B[�����x�Y����J~}¯=aNn�}�>z�C�����We�̡*�P�x�X}'l�>�a��ف��2$&�C���o���/[��^[�O�l9�<D�7%&��"�O�t?Op`�ͷ�{��)���NZ�2<���Kƥw��n�MЂe߽�y3<��Q�� JJ!Ǭ���X|A����[�Y�z��D��b�.Ă������Y��'��?��N߃~=� �.x�����i�s��ww�#k$�c�霋�1�f��4;��S�'��-@���Wh�2^WYF��WW��Z�(��P��zC���)CcQҕ��dN��� /A;�� �����ڔ�ڨVzEp�J���`;�1����/ ��G�?V����)e��'F�O���R�C_3>�wtRT�^4h��������NIG,Wg����Qk3�)d��=��k���m��y&���i�v��Gw�ɍIq�����p�P/^�N:V�ʋڒ��b��|�Ƙ����Ϥ5�����OA�)��¾�/�"����'���-���#��G"o���I�\����������>�iv� �, :�17>���������AhQlYQ��zuz�l؆�+� � �r~}I��-W�e��V��X�R��j�v�xx��l��%~��_) H��ET���p�wL$d�� ~�37��tA ��S^m,]rM���{��t���P9ɭ�S�Ϸ��:=���/&�Z(��;�.� �>&Mכֿ�� 1����l�oӥ�!!k�A� ���ժ+ۯ��q��ϼ� j��ʽX�o���fz͈���.�.�ŕ�N�h`Hɫ^d�\D@��L2f٭.H���� �S��&�C5½H ; �Z̫�*�ric�71�������2 �p�/bE M��0<i�yH��~��}{��,&8�M�u��[��j{�cL{C�G�����-���f�y�|�6�� ���5�Ekfw�'9ASA��y��ԟ��/`o~�$9�/֑f ��@~~^"UK:]���h�5�D�\����p��y�����,@�N�Ty"m����$Խ�R� ���I���;��KD`�j�b�8o2�afGQ��a �V�p���F nO�s�������s|���Ȓ�}%ꗁ����3����#aPQ��1Yd�ͺz.����Zѐ�y_̆���� q� �� l7��r���,x����\�����H��������H�,������`��& !^�W�~��G!l�Z=�����DK�A/g4�2�.�#�|�6zB���� \<����&p��u �.jA U��o��,î�K�=���6��A�Q� ���$r���,����Ka��k�B�M�����օ���z ����]�j��{� �F���9������{Z�*��틩���k9d�K)hh�.Q�Ҧ ,�=��Y�+h�~8�C�G��
Static task
static1
Behavioral task
behavioral1
Sample
400897568c8c497e2bf8958053db89b3c9cfdb08277ef7f6b3c64a2181cb5f3c.exe
Resource
win10v2004-20240611-en
General
-
Target
400897568c8c497e2bf8958053db89b3c9cfdb08277ef7f6b3c64a2181cb5f3c
-
Size
2.4MB
-
MD5
04798fd53f0dbfeca7216b9b3c9ec406
-
SHA1
204b771ab81b2c0c5bb284425b4f4045b2462d23
-
SHA256
400897568c8c497e2bf8958053db89b3c9cfdb08277ef7f6b3c64a2181cb5f3c
-
SHA512
62fe3923c738f267ddddd3386954196dc41255be7f5481d9458a17fe34d2d5dc8d8b2c7a1779d8237f14aeb1d2143636a7c8f4c83b2611be91da83881c055a24
-
SSDEEP
49152:0ugNxRjae8MzTQoz1AW8s9Uha5Bhu4rGdyMJWej5h0KRO5+J5iW6V8m8Pu:5gNH2e8M1JAW39UojhuaGEMJWej5h25R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 400897568c8c497e2bf8958053db89b3c9cfdb08277ef7f6b3c64a2181cb5f3c
Files
-
400897568c8c497e2bf8958053db89b3c9cfdb08277ef7f6b3c64a2181cb5f3c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE