��sK{�7D7�JZ�K��h�����W-tV�^?nJ�����|�7Uz��8�h"!-�X����������j<�"Qu�� 4;p���Mu��hf/��S1����ͻ�(q ���.8kf!�w�H,[÷bl%��R���BI����U�<�4ڴp�+#�8K���bC�o[�>��P�����lW[� �����>���*H� ��}k1Y)e���8|��i�}Ҫ@D�Ҟ�PMn��~(�zM��Hb���TsC�aưxxطeT�wd;|���Ŵb/�n�zmSVdiY�^� We��"���}d���E���T�1{�l�w��4�ߧc3%C+:( ~�u���?�*c�Y�IQZ��;&��4���3\*T[�q����_Qʉb�7�� ��a;!���xC�/�Zl�%��=��M��d�B�&i3��{�� ����=vE���U���KvW�uͅl���l�d>��h��� Vy�M{��A{�|o�AMΙ��R��X�qC����'e,�ң�3aq�=�. KY"cnB����Z+ye*w�35��SNV���(���5�Za���+�ps�s�r��٤���Ȕ�A�@��}o�g�g9P���G5���~x�1!m7ɘ�����N-�I��g��8j�����v]v��� ����Ը��n",�c�����e˝5�2���aH�����Ek�7U7��ۍ�`/tN��� F�< �5 �y��t��T&�?�>4�����?9��L����LB�`��(��V�g��Ɲ�T�E-l� ���n�P�4�-����P��s��]���E6��>���wǖ�I�kQW+f���nB\0~wYK;��6��,c�m�Q���C�D��6^�G5��~7w���[gǔ5F_�r��Nh[��� /R&' e�?����b'1�]�AU�5ﴟO��=�"C���V�dC���r���?�h����<(A�xA5���в�/��3h�l��T���ߢ�~�.B����GT|��%�&ο9��׆�'�'¯p����}�5�c��),���,�5�$1���|iyN�ۆ�l����� �,��C���pbJX��+� [���\^�z�I��# kn}���{F�r�l�$*c��i2*ah�;L���UnH/e�]?��'��� �r���R�(#�w�_,� gm��d��/w��/\��?�:�^�/�oI�|tr��$Ҡ�vρ���xؾ-,��p6_��h]��]y0)����#���=���W* ��v� p���A��2����/ls(�L�qN��)���6>Ҏ�%�Ny������ ��/��tz��Ҧ�豞_~�3w�q�� `�a1�<s�"^BFQ!L���?-x�-=�!�f�s�ՁIܪ���IU�ʐČ=���9�ϘQ��j�d�µy�E�7���B�@� �M,b��+}����r�����Qf�:br"��i������S�n.c��j�N��0j&!�I�ߒ��ú�g���b=�Kc�i��Nj(Fs���0�-��)dLȲ������A�F�����+c�$�֯�"�{�;�j�� ���o{�?=�zL��SH�5�$�W6G��Rl|�-����g,u�j���q֏��ƠQ']���9�e����/h��V�<���J5���0��n.����G���w��:��lf�����2��Ġ�̺9@V'!Y�sI�T��j;�G�����8�T�k������gFyZ`G/RR����o;��U)m�-�FIM�["�����_�x�3���o,���4}���+L�p4�μI�vk�ӿ�>Չ�B�h��硣TY�}e��b�S �r����h��~7U�z>�������ڌK�&�vg�S�Ҷt��b��Q�R~H�H�i~t��Oy�S�X���YX/���AM���&?Ĕh�nȠ����ZѰ��a�O\�hh���]� 1��q���w�~�4�1/�0��K�9x�&ݖDI'�~��\t�������!�1F��¯������]A;�B���<�|�涛<��U/*�&{A�Xp"�H["_�合�%kc�ϣ��7��K<ja���B� �\J��M�jF0<?{Ֆ�~f��D�4CN�.��WoX�����}�$"3������$t���h��� fU�f�ZE.k�*q1���J ��z�[��f:7}�@�JӢ�k�����/Ɛ���Ù$�W���+`�=~`AR Q#��t�l��D��!����h��dƣ��Q! :����%��;�d("@!��%�A��/��0��38a��9^���kR7v i(g��9�y��lng;�Q .��5m'ZrbX����5<`������s�R�.�B�ն[�Ro�K���� O��GBG�X�n�����ɛ.AF&�ť���"�JYy.���/s�v�ɠ\f�M���������x_��xWiu&�����n{'��q5sn� #� ʄ rC�I�7R�(=���'����)�� ɖ�iE�;��T�%Z�oͭ�1L�"���������Μ2�ן;���Rs�Am������-�.h�'/c�_�H��%�fig�o1������tY&���%dߪ�m���-2�)�D*�0P����4��@ߙ~"�g@8�"���^ˇP�>Z�^�/7M��gl���x�6R��]kkbŤ�G��[4}-D��%:U�6}Ķ��+��?K�jИ*Se(��ԃ�ߔ��y���4���Y(NdWv��n�~�I�9.����,�F��p�)eS;��ӹ���m"\���H�J�K��<ʪn1��Е��r|P�ߋ'�mȞ�zv�,Q���2��ɤ��B�i�zyh�P�G���e�<L2L�s�x����(�n+q9�.?M���ga6�?c���t���������P��t4f��{tK��A���C@�T{��ȴj�(�nl49 B�9�+�',}4�?��p�@],2>]�xZ�9�M�o�U*�y.��5�>l���)=�� E��~��beu6}�k=�Ҹ�*ϋ�'` �������JD�j6�U�uf��8[ bS*py�]L��.���>p����]eXϜX��{;�eԩr���]+���C���ش��9:�v_��co��f�aZ�T�[V���(mI��Qcx�d���!W��E����}��|�5�Ivq qcڱS�hyj,m��6L��+s���Om+�D�_ܿ5�a �,VYr�k��&cVQÿs��) ��K�+fZ-tF�\��Ӹ鍹�/^[̚q�Z�H/��̭����Pg����:�߰����܍^]���Nq�D�������-y;���XR�{��+�WW#A��x��T5��.#k�15�v��@f������.�� �)3-�h�=K�KL"�
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Enigma.BT.tr.6740.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Enigma.BT.tr.6740.exe
Resource
win10v2004-20220901-en
General
-
Target
SecuriteInfo.com.W32.Enigma.BT.tr.6740.exe
-
Size
2.7MB
-
MD5
4f9a4eeb4fe9f67e2ec06067749cac14
-
SHA1
3a85426390ae9853f881ca56e189d68a6283ab27
-
SHA256
503561658beb4146935c752962f581cabf49f99a6c67a2b5637376aeeee9b931
-
SHA512
fb523bfea11bb25ad90255415619a52f852419bd86cb7277c97895723ae43e0abc131a664c781cb6a94657bc4a0c88ac4b3140389b28c2011e9fba6132a76c8a
-
SSDEEP
49152:ULG7sdszUiwYrwkqWhSMV++CUQUobRjUNIEpc8rv3b:39UyrrqWh1V++CUiUGEBrz
Malware Config
Signatures
Files
-
SecuriteInfo.com.W32.Enigma.BT.tr.6740.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE