���a3�=��z�8�*GrA��E{����YVi#JcSR>��e���s6�R�e�_������ ��C�<�Y�,'v�)�S4��#a�w�9I���F4����=C�6���a���.����w>J!0d8�C��+Gi�� uq�ac͜�u[�WYNDB�S�d �X4�fL�T���|oˮn �bOZw�qq����f-�1JMc�8��淪Q���=�o���Hl�����������9��8��2N'[�؞�-�'���I��fo�uD��7�8�S�F�ѻ[**qS�oߐ�����քg7�:���*���V�x��I�n��rM� B���c����o�3��_0ܖ��SEP�¯�Ah��B*&�F�0m�-�Ɣ���63�]y�N���="��Xs��;����N���)�B��4�����LBa� ?�Z����Y�8y��|�+a��Q;7@B`2�T?���0.�D��=O�}<���k@ag>'kNS�l��+�<W���]Ml��H7.iʅ尻<��U��:H�=�d/mA��CT%�K*ӏ����N&R�19�����zL�ό$���`6��xHz��d0��K[��Y��ﺽ���*\28���rZ����X%�l����������������9����#�!cL��MNT"7�L ��Z�I��yٷ��m���S !1��7-�T�]�1�Om $�̥����ћ���]j'm'�4; !+�2fq/5^Ђ��[2���N�BA���D�?�6+��3ZO+���U�PcџaڲϿ�?~ ��D�D�g[�E� �__�S��T7gY��"Դ<�q�3���é�lR�N��s� Rv��?^��0>�t�{C���"���`ovJc�M"߹� S��Q'�����f��JC"6��T�7>\��_X���]��{�:��4��t]�H���7k���XTlMz*��?�m�Zxo\-��Mg��+�Fyv4G�����|����]�S��#��v��d�|�u݆��/^V�$�w�l�|Hj7��ඩ��i���P��@=c�\��Ѳ2�_��S�p��N���M� �y�����l�J�d�)���2v�~����������DU�<?����@%5���4��o�㍌��<@@l|��������_-��zC�e���>�M PKf0`��Δ֛���|8�;����ϟ�� [��1�f���GoV�9G����.}M/c��S[�����ZAʆ�>�T�L�F <�B�������äV�t�X���u�OɊO���D��;�mmF��M�3�ͱwS���|N^�}Z�����g|����b�`�qR�B(�=��������L�[cy'B�>8m�["�C�|��}��<�%�ס�M�w��&�{���g]�c �e< '-�}��\�ʄ��la����]5��/�!��k�J�$I���L<�3��`�ƀ(��J���'�/ͯd=�R'��ae���@q�������6al�A��������Ek ���s�� A�c[fQR���S>;�ac���WF�6a�ڊN!��γ���j����ۀ���;�p>Uց$��l8��M��rȠ���N�g ^ � �KaPAp6㿭�-x��;�����U�C��/���#�\�%R��!}�J���Z�H���;���$�`�8�� �Z.��a�j�F�ps�nX!b����q��k�:���z�%��5�aq�k2S�J���_h^K��[�pR^ �~?�����9۫�g��ڧ�y��r~��ZǏ�-������pUI�~��O����.k*@��ٜUÓ�~�EH�$���^<v��<�*/�7���e����CG�e� Ъf)���v�Bخ� Q_�gg2��1$G��g����'S�ɧT���Hσ�����*����3��e s�T{��Fwy��y0�sQ�&Ւ^á��y�o���,?����R���H_uL�m��8t/�W)� ��t��z%��R��I�.����a�� ���S�$��O�ⷮ�9��n��X���23�{+0������������e���b1;�ؽ�8Yu��P��c5T�o��΅��ls6�̕9��5��h��`��ץ��5E2ӹ��#�I�x}��vGkm�w���XJEV�s.Y�2T�),O�v�]�e9[rLuf���>����M�bQ��,9��������8�2��#k�@u7@��68�?��5j�}%V �- ��Y���zPL�y�y7�/��ͤA�������w���h{��?2�Ȗ�����0�&���%�"�l�J<���14Y�"�c�;NS7W��l[ϝ�i,����%xt��X0���ET;�*���x��wϤ��Q�m.z��I���>;Fk�Y�,b�jm����@�c�^9a*D��Oe�e�=��f@Hn�ә�zi�b�\���\~�ju}�����f������t$��Hlu�s�l+�q;� _@!�먲�]`�� @��Q0h�j�-�>Pghݐ��w�������υU���?3�ĵ��DQ�-�ou -�%�eb7#�j�D,����'+^ �����p�pG��l�zn=��O9��a<��%j�PBZW�j�����:<빿�����'�W8Lqb�c�}��=U c�E6�$���4**>����D�QᷞO��̯H�;E���w�������q���~B甡Cn6�l%�/a[\��"t� ��-�T�t�Q��vf��o��y"c1���.}<t$'?{��\�=������M_�����r])ة��:���I�>"[���C�p�뾞��&q<���c �rt�"נO�+�t��3���/���+edU�0q�Vv?v��u {��v��(;>M��4����ߙ:\/9���MԂ�iȜ��/���n��A� :~kht�z��0q:�����4�d6��+����q4���cfJ��_�Cj�HI큏�+�&���''���CEAE6B�vV}�#sޤ`��C:X�Q��������������b��%0Yjא��)4�;��fB��U��\mNxI����y�_��8n��o˔Q|�T����������U�Ϋ�dKC�GK�_�P�>���H����u��\��#|vW,�I=��EKG��Ju��������/�N��+ʭ��"����I` �'���i�>$�n��u�9�d�4�E�� ��p������ ��s�x�'8Q�������[�h�d�~��$n� ۶i��Z�n:QG�艦7�_�?�;��x:e���F����%���[D��)>�����(�6X�FB'E{"7���W�ז���[jO�7+f�vЁ��5�ZSr"���>@}�2<�3qOb�W�kG���f}KZ�� ��w�FpiFeӫz�:� �5+!��/m 8q�x�}Y��H�\ �4̆�� �2�W�SW��nݨ� :!k���?'F��F��J��NyT?la.5��yVކ��L��/�!'�oJg�OD�1/� gn�G�&) �->�?�� �&e[#T{�=�0bq��BX9~��w�t�ʊ����߿�qݭ�"�� ���}&H9��E�� U���e�j�Ӷ��N�'�pG&J�_R�2tx�b��u� *��¨_ɇxo3%�gM�� ��.��o$�> ӳ��G0�����v���7O�P~����E=�xW?<(<�Xf��0P�b�Gf�T���{�k�S����&������^�|\�d]$��R氮�-��T�"��k���B D<H9�j�����&��75} {���v��Uگ�\L ���m��76k�K�$��R(-U_v�V��F
Static task
static1
Behavioral task
behavioral1
Sample
41312792dcc936995c9e6c4b645482195a80d021ec58837971068afb6416b44d.exe
Resource
win10v2004-20240508-en
General
-
Target
41312792dcc936995c9e6c4b645482195a80d021ec58837971068afb6416b44d
-
Size
2.4MB
-
MD5
d961b76024edf043b709ae146a38a4c7
-
SHA1
e520a1872769d35e045fba592f7987eb97e6f175
-
SHA256
41312792dcc936995c9e6c4b645482195a80d021ec58837971068afb6416b44d
-
SHA512
3b489b80d2f66920872ceec58907ac05b3283bf95bc19a4268c8ff86b0a22ae085d602a8573c09c3cf19d640388d27b0198d72e804c8c727333352d42f17beec
-
SSDEEP
49152:ixg6k7wKl7hD3KwVD23iA1Vt5//6+b7FA55b1xiJOtieykm87eJJB1bsjbJ1TD:IFk7wKdhbj2ttN6+A5beCm8iJOZBD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 41312792dcc936995c9e6c4b645482195a80d021ec58837971068afb6416b44d
Files
-
41312792dcc936995c9e6c4b645482195a80d021ec58837971068afb6416b44d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE