O� UC���W��˗���{���[�.ey��I��O�T0�ù�Ꝍ���]D� �#P? ��m��ES؎�p�M�jۀ����E��1J�s(;��uq� ���~ ��QvHrX���p�n��}�B�&<�:��Q�Ss���1dZ~��ɮHڻ��)a_��=��L?yP-Q���x�a ���FEO.Q�����,�%��*�;[ɋ��8��p��Ꞥ�J�\St�w������ ��I�����QjxnYj���l�����s]�����6����f�U��牚2��Om�ف���{�$S�%��{�5}F,��ypň���W 0�K�K� 0j\-[5 i�)�iVv���1���;u��.Y�2������R�bR��}�B�T������&����Y��#�@Q��O�bk����hpTt���P�����i&7���q`ǭ�)J�������23�8��>;C\X���p�A�� �U,���I'�n-ğz]W����^��/���)c�b5 ?���qudR��4 q��x�F��;���m��Ob���N�B�|�-��Rf��nW,+� ���֏R�Xc ���ȋ���pE�rLu�^��1èO�� 3�@=�R�m��7��:&o�K���������M�L�s�~ҍȅW=%�������u�8�i�������^����N�������y�hmې<wu���3�ɬŐ/�0|���H(y<��B�?P`�8(Nv����Eu���,Ua��'��1:�T�CS��L���ʨ@�T�����bgWfϚ�lϦ�{�H���VAx� Ѹ0ɸ�V�WRVe�ﯵ�Q��r�"�� ��BXrO�0ѧ�R.�u�L"}��@[v��50�!{��[ýJ'�� ,�`��hQ����r��ߎƱ�e3mNj^�Rk�[ؼ���:ѣ��U���B�縋M0��s/��:��q�o���L��W�ۭ�~�� *X���Q�i���~H_�Gq�.�N|;�<�����!^�bܡ�o��.4&�d}k@'=�.w_2�Sb�y>����}�@���_�Y�A���_�iN��֠N��� !�`~�ck���H�<x�xv��҄�bbn&_ɰ�8}{)��n��&�t�H�6� _z����z�< �4��0y���I"�Q����y?'5�*��q�s�=h�>�[���%��\�w�3�N�:i����ԅ ࡰq���mZ�xZU���2�Yd�1�L�tr����`?nc���5����9h�:��XC2�hT�����cY�R�ma���N}�����`{M��]yW�},hz���鰏�B�61e:QAUf`�^��5�o��J��gtczr�s�L7YL�-@�U���YӬ�ԗM�������`�<��o!�n��^8� V�4��RX"&�BL�S���t�<�F�:['^HJ_�u�kÛ���̹�m�K�.$�Z�̟&����:fI��k\��.r��E��8sM��#r��:8�s�ނܦ�S�cK'�~QF���K���}�L��>Ɨ8��2����t�%JWr�s��q�dP§��O�`��K�����)U5ih!MN��4k�F4��Շ;���pX[i��뤫Zث���)!���w�)���"�0����M�W��c�m���(5�����o�o���IQ��$��W,)�e��y��0��މ������>�������R�t6H�{~�1����A^�2!*���I���_O��U��HF=������6��S�{�V�ͪ;x�+����Č��2[�^�N`�mx�~a��f�*�P�%e���]0�PrF�&�P_ӥ����ҍ�ѹ���*C�@>����Ru�d ./�m#���|��ne�d���8��b�t:� �D�n�+Ny�W"g������1'I�A����=��-�P�)X��E�4Z�������L��7��1�6������P����n�<$�jo����Sd�guHFY 2x��Ω%��E�c)��'����)�Rk����A΄�.�(j���n|�[?,H���&�1��m�-�X�U0�E��[���w�����#0���%ig�]�C��/>4@����^��A �R�^���Y��K�O�����P��M�ސ���D�8Bqxe2��,����6j���HPM����9�ݡ�s�t�D6���j�*��:��բI��`&����3P�&�8�M�rX��=����K�3��k�}�.V�)rwؒ>�a��a�$xGG�\4�1�5?h�(w��\�`� �,���eLub�w1��0���p�"q��k���� s\�m�(�Z˪W��`��xЃ����7='K5��J�3�/�� �%� �f��r$�5T�.+]x �?ǹ�~��f�Ii լ��+�^�:��Y�<XJv��oWڗ�)��'�B�,g�=�"s΄8U�V��X9�VW>����^T��R����B)�gأn��W=q�n=�r��`٧��<'�/� 쥬�WׅBҙ�������V���=���p�1��pK *�KcT���А�2ص�U��� �xH;�ʋ�����$A�u��@���q$3H�Ob �`�W�PV]��7��k�J�Ug&��/��\υ��V�{��yw(��]h�h�����ߚ�K -�������[=��j������F��rU��}�p����e4�,�hl�n>��v���1~~Q_Ӑ�г�Bp��-˥��������ڽR�dGL��W`��99��c�X���^�!sd��ST�m��G�bҡ7�vJ7���z)'�����P�5�W+���5���?���o<g��U %T��od夌��zȇ}��dƃ�א*�<F��TF�6�݇HW�S(ƅ�7���Բ ���{���^����g������$� ����Y>_h3Q���mdžz�T�rћI�В�%I�Al�, a:��H*(9��z]��7>�d�{�н KQ�i��}��'���=��t�f�\ ����u��!7�vl̂MC�A���J>�G8{�vg��j�����9��Z�@QA�6K����@*����Jت\���T���{��G#0�w%��cz�4��~�8^�;�&~r[�8">S����?�һ\ D��(>I3����Kl�j�}����f�>h�����'��U����1꼽�����s $�:��NJy)-9�06&�D���/�����Y��gG�ܹ'ɀg��h[a��?�<Y��r�js����Qn���yN�ՄjP�m����F'3�mbcX���#���Y��H�mrk�u����TC�-�鑅�&θ���rz��47�m�p% ��$6��m�{'���\E�oNbߥ���?>'�����S'�EVca�^rơ�Ĺ�O�}H2`��]��C���6TD�lY���+���s_+t���c��ֈs{LX��9�@ob�(.7\��0��j�J�0M���������:qh� ��>'��D�(� �#��Ҕ�@!\3W�=��
Static task
static1
Behavioral task
behavioral1
Sample
d7ba6c60671c495121ce1f9e4e8b1c9763a57a78d0920d25078fe31a4cd579b9.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
d7ba6c60671c495121ce1f9e4e8b1c9763a57a78d0920d25078fe31a4cd579b9.exe
Resource
win11-20240508-en
General
-
Target
d7ba6c60671c495121ce1f9e4e8b1c9763a57a78d0920d25078fe31a4cd579b9
-
Size
3.1MB
-
MD5
b94b5a7746ea1d10ad4e0f2487d43854
-
SHA1
860afd0f66eabf8d0e42f7264bd1c986a7aa8220
-
SHA256
d7ba6c60671c495121ce1f9e4e8b1c9763a57a78d0920d25078fe31a4cd579b9
-
SHA512
e26160736f387a5440a07b561350bc34001f91c380fd60e782ded46ba1236470b8c9e86744505a7fd8edd65bc28f7fec51890dfe61d018129e9ebe4d13352d14
-
SSDEEP
49152:zQJO3pQGC2h7j6TDIfQY80WsnipLXT21W3gj/6sGWfjJNzuEPOJ29bqIB:VR9QYJ4yWwuZaPP229bqI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7ba6c60671c495121ce1f9e4e8b1c9763a57a78d0920d25078fe31a4cd579b9
Files
-
d7ba6c60671c495121ce1f9e4e8b1c9763a57a78d0920d25078fe31a4cd579b9.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE