���?�n�����-LL����}���5�N =�{�wU��U^>"So1_����.�����@�����G��Ʊ��q����5 3/9�y�:�K�g��5G��uEҷr Վ����TP�N��t�cB6Ap��~|=KO/���R��$Im]�O�o0ϑ�N+���og�aٕ>H��������5���� �tR\�����AX�k:��X5�X���l� l�u) T�2�@����,� ��&yNP�L~ ݍ�桲} ��=ʇ��'���� i�=�"���0�)��+��}�$]�k��P�k����г�]\�&U��QHf�����#�_�����/V$l�L#6m����0s)N�b�C`��#��vG�O�jB�GL@��-�:��e����,�W+/�ZN��G~'-Yaf C����Hև��-����[�IZ��ؑx9�|���rk:��xR�a/9��"p�f)rv#�m1��kN{�&gdn����{����?I�a:VC;�W��� %�݇2�8O�c+ N ���U+�b�z���B,�|��6oy8ol�K��ײDE��#=�M2��蟜�%�Hf�B����U�uhPs�Hu�,|�Z�6�<ҐU��¤�CtQS~��O��'o��Hh��;Ě!i��&>;�;��شБ �)����YN8r�?l�&�@���DPL�O���a��G�YS:��%�\L���Vj+�ގ`�}HQ2Iv@$�i��O�RC����C���Pa?�1qG=Ԯ��a���k��ȻM�~f&�)�j����:-��8J ���fp ���A�,4�����ď�x6+�V�I@BD�VnL��<A▁��0��v?��L��.�`ݠ�XĔ!_�r�� [�1Zڜ'9܇�ͭ��`�+�WIGj�� R��U�O���n����Y���g� L��݄��2A�1���b���Qa�Բ�+�F��ǫ��ҋ��Rv���7FϨ��R���$p%q��{6z���6�7c1��a����}ԧ�%�8Eڕ�������<@����_���yAՄg�ʄ�F���IV��˙q�����jUA@ ���d_ǂSb����8�Hph�7+�Ku{C�� �h�������I���ݖ�e� ��:[�2���\f��y���z �+��h1̰�P��p� $�"i��T}G��Y�Bs8�����[��yS2 ��Q%�b�Ͷ�d���9��+��|XQ3u��31�&ϯ4��.��f���I�k�{$��=�LA�Ua����۟/�Sh������sa���`��� 9&�.$�]i�m��ĺly4��[k ��c��̭K,g*n/�,J��' �g�q$���oF�� ���wѯp������< y���%��.����C���/n_E�~b\�C�P8�.���f�O�r5���`�&�>��&|7��A.�+u5a����Z�{��p�1�� ������/s��9�\V�}N���A"Kt��u�Hq����nу]+���|�OMJ:bN��_��������X�M6F*EP��C��kB�汳aS)M�������$GjIkCjYG�aq�fУ ��H��9=��]���d���l����n�sxT�i� �h����.6��GC�n�e_��P��L�j�r���������Mv�������7X#ϒS���y��J��LS�x<3�g����=9X3"_K�'�'崹��{�˨'�� FEW��8�|K;W��j��7(q� L�)M�����h�����V希1�qSj��������@bF��R\1��C���j{\6e��b��;�?���`�&r���8�D��v��I���H�9t{L-�1&G�B�3������f �f�������>5L�����~gr-������]��Xn���6��m���,�Ϥ�d;��t�n�!Kճ��v�L��:��:,H �w ��Vo�5�9�����.������&��ݕ�+�7ri����!��������a��i�����t��ULxDq�5����[GUr�J��xN�-GN)�I�2�И&����>��X�ھ Y �!��]i=�k�OUW��v[��x{�#���Ե-�o�.��rA����ʚA�YǶ-��{,��0l��=,ף�e.�0R~E��ɦ��b{��C#�K�T�gR�h����T�������be���l�᭖�}�v�@Ȟ�(��" �@^5�|'ӌ�]�e�\��X���pC����"��S�U<��j&�y�\6��4FW�p���4��Hnp�� g�2�������B��Vw��ÇS�x΅�$&������Yk���m��e�0r�j��<�gvv�͍��E��<�� m8n�K�����8����WN����A8��sx������Q4m#�`�:D����%�*��Ǽ���~n噇Sˀ�P�5vG�E<�<[���sJi>�T�b��,&h=�a�op�ۏ��5��f��x������+� "����Ⱦ>���F�g���{O�'!�Y��1�^1������w���'l_:مHA��T�4�����גx�: �'�Q�AxH(b��z�jg�J'�*��f�u$�T3mU�~9V:'�P��i��U@��C&"!!��%%��"#�L��M�rF7�#�"h����N�A+D���X������`5��r�gT���~��N��(g���"릀�l�����9�)��.��up.�H�Flb_���aCK=2)ڎ���n2`(�w�����g�yk�k3��I�zI����g�PP��9y( '���,.J ��QLJ3|z�p�<`���9ൡ�=�����Yu�G�SIiV��̤h )�pz?�������>�e���id~���gj�g��B�p�3Jz�ؖ�����(���m�����K����p�#��g��E�&^����S�ih4?��-k(Vm��$;�����v���,*��U�����1���.�3��Ͽ=O�t�`K��5t�e�i3��dDT�<%�C����TA����(� _��|�?9 �����M��x�a� u����]^+�xI��_.\�>�Nzq_{}k��u��vvla\��_��;E}�;nh�5���vO�$,��8��K&s�ZAFE�e���rpȾ���pU�A~[z�����C1}����Wq��pP�w`�)�oF�� ��,z���۴�R��w#ְ^���P���<���n��q�cn�d���}��J�ֻU>X]i�m �����0�b}����V*?��狇rS96i�E�v=�I�BtX�m����ȿ��9�x;Kr�ȱ�/�M��_w鶇��(��bf��Z��2ZL�����R.F1h����d~�W�s�_�kR��UM��U �e��f�=���5 ;`����k�9]/���K\�8Z�>��i���ʃl�a�X����%�Lf�Z+GXW�M��nul� u���-|o֮=�=$Q�2�̸����G�-jĴ���F،Ĺ*8������?\;a��g
Static task
static1
Behavioral task
behavioral1
Sample
6a1bda6fa37b02776b44c80fc1d8329bd7fbd49ff46eaf37346e5c436a52ec9e.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
6a1bda6fa37b02776b44c80fc1d8329bd7fbd49ff46eaf37346e5c436a52ec9e.exe
Resource
win11-20240508-en
General
-
Target
6a1bda6fa37b02776b44c80fc1d8329bd7fbd49ff46eaf37346e5c436a52ec9e
-
Size
3.1MB
-
MD5
72007357beb74fea20e7daa285212b16
-
SHA1
e37f50ace578fc3a69fb7a312a659d51491e32b0
-
SHA256
6a1bda6fa37b02776b44c80fc1d8329bd7fbd49ff46eaf37346e5c436a52ec9e
-
SHA512
72a731a1f9dfa6e927665bb5649420a1114fecaac6e7e30ccda9028f37c1e6de582e0f237f5a95cd012603b916c19aa31582729fcbc3d86db4a2c4b96d6acc4e
-
SSDEEP
98304:0y5rnbPr5he+zDgy3yQ7rDnI19mQxWaF67:0ADbPDQyCErDI19mQxvF6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a1bda6fa37b02776b44c80fc1d8329bd7fbd49ff46eaf37346e5c436a52ec9e
Files
-
6a1bda6fa37b02776b44c80fc1d8329bd7fbd49ff46eaf37346e5c436a52ec9e.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE