}k����2 �ey&dV�A�����Ap��U��vg���lBY]�8A�M�D�4����鬂�oX��j�N�&/�kشaj���耊����ӣ6_�`y��U#�Id�Y�ٸ�ȇ;0�ମ=��:�WN^���A��.e�)o��A���W �� �C�`"�D���9 �i�Q�6=q_�}��mxH���%R���o�Zas_��G�J����Ɛ ��v�ۥ�Pa1w�W�&L".��_&<Ě9|Ѿ�A^�4NOδ�o���9d��r�Z,N��;�t�]w� Z���8�V�����klͫ��45�����o�.��Ԏ+]�����1 ��!`(�>�դ�qN��j��R)ꈝGw*~��0��hh"��9�*���bW}�ռ�cLm9�\T0&����{.@���3/�;��zʠӻ����vi���<�zI�ť܌(r%�BT}���,7��y��-�����'-��Y&����"M{�?QE���[��|�p!P!�I��.?��Q-�{b�|��w�&��*�6ہ}�a �F Ӣ5���]�9d�<�p�C ���������X�~W��|�Ң��E�U$������e�eɰ�-��H�X)��Bu%_���a�%%Պ�Oj Zug�{�΅��,�D�q�z�@<�f��PC�ۮ^�u���B .X��-b'^��s�8w�Dez+۬ �ˀFW�$5!t����Uބ��t#s�diu�%]f��!Т�����a�f7��\�}p�����E�A���Sc>��IJ,�Z@���蝻|��)�s(g��o�� � ����'$�-��sn�ۙ��_��I��ܸ��R��U�iѸ� �� gSWĄd]���^?�}��$�0=oר��H%����8RHHÐڤܸ�,o����?��#A������J&���N�>0�� an1]���m�� &���bpR�.}����7.��j_�vA�/��)���|���1�~i���� G?��ԯQ�E��S22к��0T��x�t66u-� ��?���� ���<.��1k}�#�#y���}�� ���x����:&dl���?�ҽJ���Ր�����ƈ�����'��0�ל3A�a�S�?�@-���ۘ����R��fc�x��E�͐.��KfLʠ��w�i�Z��i�f��H��'Kx���g.��y�yG����cO��H(��Jچ� Y���'�����J��������9�L���'��OT�N<٬~����Pe>�p ���n��=��K��c�Yqe�U��5O:�͔�qS�W�.�W��`�Y��x?���c�ӷ��ީ=3�D��f��D?��pFXm����V����u;N&��D'-�����<� �I�,�;����W���3&3��KF�p�����+��܋l�c �j�N��T�1�����\���K�:ߊ\"`�% T��n��:�������nDOCM���Nd���w-�T��yI�Ce��=�c��<5���i���ބ2X_�q\z<3�t�u��>a��U�O�O��8����;��Ķ&%�ݡ�ʾ���r��Å��\��]�.�y|g���SЕ���5&J*��y�X���� �h6�BP��C�����b���;���b���,8:�E��U�h�ۀ�� }� �!憐T}��N����?�/`bO��cz��GؽC �!��~ ���5��"r9�Y��D���0z�g5D]X?Ś���'� [%J���_N1R��Y� %sk�������\c�},����12.W��,�_��O��n���t��8�҉3��M"�W������D�1:.�������K�P�{�>������lF'u0��HL�/����lK�8S (����k �����_FH��N�FV�!��bA>���ʴ�(�^ʢ�G1����� �{X�T����ƪ�*\�O��[k 6�!WO`���Mo��`���vC[m���e����/�����/�C�� �0/�h�L��:�s�?o�y�A��(c�4��q|�J\r����𭝠���e�6�Ӡ!桕&�����t���m�}���l{?~ɃR�O?�����v�h�?�l"z���4���A����Pf �%*����X����E��hn-^II��_�{�@ ��C�x�K�$��8����8v�.��R;��\��q9Í��U�)�q'|��n�)(���f[ҶU��9��z~�?߈��*ZN$?T)x�2w��M'v��R�Q��\V���E��$\Y�Fd�G����o�v{t���+���T���G�zV�j�H.�$2�_j3҆X)�*������vRg�r;xt�'#�2rn�R8�U�K]��bɱ�����q!@ɘ뀣�e��$e���i��-{TQNLM#�o�pv̆�%%�p<cZYe�탕4���==-oК��D����X�a�y�1 4ڤo\HB�Ia0��TP�&�D��͞�������5��?Yڲ=J��?>>���?�q��Ipw)Ƭ߹U�jh��ɴ��-RZ��m��=���Ő�6L5�^�T�2.r��ws:~�V��q�Ow!�n�I�~V�և96Q��9��� A��B/է�)��>��1�C*Qw�X� �["����<��đ���qͳ�$���1�oY1 0�6%��#��!+������~V1ヰ5��\�}�AXUʲ� ���Q�.��T8U�메�$ ��-��#q�2��S�9�y(b�S;�s]L�_A�p<�ct����RT=/�@����|`� �R�=���G�u��_[�!)j_�I{�+��Wv�>;��>?d��w��Y;�ٷf�Ve�ew��K�TEdlZb�b��Ms��@��([��J�|j��0\FH��Kڬ�5������,z�Z^�e�����4eX��A�a_cغ�qN��JWJ}���v��U�ΐ �W���M���))F�p����T�1����]����"n��� ��sz�x��T{c����:�bLSatas��"',���4�N�Ӿϡ�+��G�-�^( '�I=N��Hޛ���gh���s�ҤB��Z��)�����$���4L���ی��{�n�w��1 ��s-M�0$�wl$|Z]�s/0� ��y Eu@(�M�u Q7�sgp���+59Ei��e�I�Z��Y���/%aP�� A�+��Q$-QPp�q�QZ���n�%�ʅ��j�y������KQoU�H��o��������q���� / W�[c촋x��1������oG�|<�:)���H�V�����co� ��>�mC�̝@�+���ə��Ҫ~�,��}I���)�ܿ�[����?>�3�҂��6�����lpM��t��@�8��zƱ[k4]�匥�Z�b��;U2���V��:y����<����"�t��WIv�^����Q&'S�Oa�˥��O�J������H���.�(���/%���W螮-u��hGX��H��q֚rLƖǝ�����\�"U*���H7�F����X�jH��N�kQ#/��ER�{[k�p�2����g�h�]�p��㳧�cq1��I9b:s��/J������ce�
Static task
static1
Behavioral task
behavioral1
Sample
6b5d49caa83ae109c0421d19555dd4eb0dc4e55369d5893e2c702b1412b25693.exe
Resource
win7-20231215-en
General
-
Target
6b5d49caa83ae109c0421d19555dd4eb0dc4e55369d5893e2c702b1412b25693
-
Size
3.0MB
-
MD5
3a75439921b2b65247545eb8d9e70bc9
-
SHA1
ff3bfee87ebe22c0071a61cc40031c950b3c8e8d
-
SHA256
6b5d49caa83ae109c0421d19555dd4eb0dc4e55369d5893e2c702b1412b25693
-
SHA512
9ab972c01ee7da9115983ae09b60ac56e215773a614421b0f09aea727d70ca0bbd8f447d5fba572e72010237f3f942c155e327a3b23b8ebc1adba71f454eb319
-
SSDEEP
49152:2Tm/IkI28Ef4w7FlnHQ151Mbs76co0nFfI7es+EpjWCSEjZ4sV5iqUVu:2Tm/Iz28E7LnHQrS47rFfqhSEd4sVAf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b5d49caa83ae109c0421d19555dd4eb0dc4e55369d5893e2c702b1412b25693
Files
-
6b5d49caa83ae109c0421d19555dd4eb0dc4e55369d5893e2c702b1412b25693.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE