d?��~㕺������?6�t���"'99�ޑ�;��ˮf�b�!��u[��N�H� ���J�+������X ��.�o��y���6��PL���x�`���V��o�u����l�F_��i���{�겏�,��lA�L�א��ӫ���D��n�&�̼Mis-cm�v��2�jG|��f�tq��UTg���E+[�H����gm��6C�*��[�yq�z�� 6䶗��D�H���IQcS6�� H�o�g��V�W�X���Ī�l��08��<����͝�P��x�O������:�C�̘����'z'�Ź��){L B���ͣ��"�#m�I�GYS��)~0���ă����{�Y���R��.�s�O<]�|�UT3��$J;l�>_�6���gOQ���/� 9���a��O�)���Z�a�2'��j|լ}��i���� m`�_.-���o V�ox��OY*�IB�ǂ)$��uz�J��-�"��y"��;�;�;��Ӏ�By6�xx_P�ev8�2(æ�M���� ��E����T$�F����w��V��F%Z�#(��'I��%<���>W1)�S��BT�ª�]��q��$�.EӸ28˨�9�y��Ɂ���@p�?�B1�������R�}�_>�x}Y�c�r �n��X��'YH���II!g��Dž��я2��3ݺ~6 M�/�T�|ֿ.�w"��/��@�_¥��_ih|q�7-����x�T� �N�'x�B�.���B߉U��#���EPWDe����=h�m�����}��Ĺl3|�C��k��3<?]�qaǾ� w+g�/Q����({�M��~��Q�Pߡ�����z��&i����� �婌�d���4���lg��n6i�'���,�r�<��2�~�a��q��gW�!�~o�]���▕�Z�hx�*�S���?'�`�fr��$)L�r���Ӓ�G3���e꤆�W���&Gq]��+D|����A�c�����w�ɝ*{��c������#���� ���x�"�^�G" �@�_2�л'ulhԍz竽~ɈZ���� \\����}�+��Sݱ� &D��ʷ�s&��W*��� �x=j��~� � 6��:�_+Ma�.>�������pM�>e74:�!�a�|�m��ЎV��X��o�\�E��|��.HU���YN�LcgU����v$l]KHGhY|Q���hA�6����u�^W����m�Z�>F���Ā����+�e���Ҁd&]����Q�~�=�Y�ħ�[���jJy��lX�&1y����O�����uTI���A�:^�:�7�qi1�*�2.�����Kݱ+c�'�4&O�������a���rF%������!�)��(8�։ƺ� �K�8eϞXј�����B}��wa��B;����Q!y��Q��I���oH�W_O+���Rѳ��ˣ��T��֑����ˍl�Z����Z.��� ԟ�� jjRa� w��_� �b�sr���O|������҆O ׃����B]�7���K�M��F�x�"�7#B#��5d!�7���X& ����x��2d�r�K���9��D�JR9���+o=l�6�����~>���a :�Ǻ�:I��l=��]���S���~�7b�+�4B/֗Lɀ�go���QK'�7^s#0)�����7�]E��I��}�T�A���hvf俟�0pVi�2.�*W�!�3$1o VʙZ�Q�`U��L�S)��KBt�x���d%*���{Y��g���=E�%��Uɐ�`H��2K��M��K�� ��x�Arܘ���q§^�eP���*)G��=8��j'SK.7r�4���������2yf4�<�d��l�;�sKp6���iBc�"���pBz��T�:p�0�o�e��X/�0��˫��q�����e��I�A�Y kiͶJ���,������K�h�p^ˑ;x����|���`3��6�|��I �z�u�� V����mj���AM�J��=���t�c/��9�N�% �<�rѹ��� e`���;$98G��" ��4p�����yEF�8�IZ�km���0P��z�Fވ�hI�j�y�@�`�h�����^��E �K#}~�e��%�`كF��0f��mB&��a�u]��t�~h����hU0n��̶��;�c��7���&�!n7щ0�S�epd���[����!����R�+�(���H,�摝�I���G^��(����y�4��v�ڙFߗ�����G����Ji��ѣ�2�i�<�+���:�0R�gWªf=+�C[�'���)�>cf����=�ͬ�N��]���c�2ȕ�E%>��=��2�0+Q'L�>V�(f� �Bƪ�],�r0T�OS��Ez���R�� �e�� �s�.8v�7�>Z�5�Å֡�ה�y����S��h�[��~����Rѣ5vx��������B�rwx�ZY�R�P:�?MB�<��HWl��#iSJ�����˲�o��P�O��-AÑg�OU_A��+��3�0�YD�lL�u{�OՎ�Q�0����)E��װ\@}t1������Q�/d&��u�(@mqi0()�U#G�Fp�Ȭq�[WE3���\LF���� ������.9����83"������h����K���զ�#�붋�Vx������(R���V�!M�-���9l�l���O-�¶�R`��`�=&�d�FH� ��mQ+5����h�{���(������A*�cQgq����{7�e:N� Y<(B�<�WV^�V�i�m��;LN���7�4D�{z�&}�?$B� �3+��q�<���0f?�=K�+ʦ��=��`��n_����_I0�n��k֦iiL�L���ċFhCBG��F�?�cČ�5�M+ ^��t�9cw*��,����|����R,�.����������'@�QF�Jg��B������E!+`U3�:�Ղ�"��o��! ��4 ,!�ּ�������tfJp �Nߖ�&� �.K8B Ki>�����k|�w;�x���%��~k�L]zt�-������e$��������<��&`��yT��T�S�_U��>-O��N�9��g�㮾��Oc���˄M5V����0j� ��+�\NE���y�<�3��?"p�؞�"g�N<TdXE�� ����>'�{
Static task
static1
Behavioral task
behavioral1
Sample
768a1a0bf023c0866f36d9dc059122562c6f6ac1c8a64dae3f5ac1b64610768c.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
768a1a0bf023c0866f36d9dc059122562c6f6ac1c8a64dae3f5ac1b64610768c.exe
Resource
win10v2004-20230621-en
General
-
Target
768a1a0bf023c0866f36d9dc059122562c6f6ac1c8a64dae3f5ac1b64610768c
-
Size
5.6MB
-
MD5
aae7e69dcc7cac965ed36042872d2275
-
SHA1
601f39b8cd6f2a67f18f3bcd12e74aa1194a64b7
-
SHA256
768a1a0bf023c0866f36d9dc059122562c6f6ac1c8a64dae3f5ac1b64610768c
-
SHA512
4b0b47de2ad229ec012b9dfcf45b245221dc11daa681814bff36ce463715c7247cf7eaa4ab470a4ebac3a71e0ab3adea08274b5dac162a19d287964409f83350
-
SSDEEP
98304:BdfgSCt79W//i4mvFQtbG1Whqs41P11fv2ZAPUzM/Z/DI6QQZRCgLax9N4L7N3f:Bhga//5m68QqsmP1RvUAX/Z/DI6QQZs6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 768a1a0bf023c0866f36d9dc059122562c6f6ac1c8a64dae3f5ac1b64610768c
Files
-
768a1a0bf023c0866f36d9dc059122562c6f6ac1c8a64dae3f5ac1b64610768c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 192KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 221KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 19.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE