\���Z�k4CN���-$��O�h�p�$L^mD� �*�;:[�����z���}���͙��b��g#���^�T}��`jQRC�p�Mڋ>���4碹��F�:UuW�+�"��Xpf�J�~*��0� D����c:�M�!J���X�OS+V�#�h%�L��'�um@��M��nw�Lm����*�R�i�Z<���hʨC���MC�^�M!ni��^O�}�r��~=(�M��"f���_�j�ly2�,y��\ 6>��o�������vF*;\ԑ@�@Ҩ_�`��ր�\;����l�������X�"Ş�G��x�p��l��%Y>�x�2ܗ��Ŝ���,���y�RطgA`V�x���Cu�q5ղ��lj�#;*���89���䅕��L�mڢ���M���A�7M\�X@&�/�����9t��Ĭp>\���^�&�;$������#УQ?����n����5 �h� ���o������v���������:^�OER��}��FreG��Ƴ�^4'�?�/��,�2o�6�L�nԏ>_] ��S���%9Q,L�_y7�#KY4\F�ò������uyGXҡ)���OƢHuUA����$|,A�]n�o�z���j����;�h���G��<�l<�~L9�d=U%��S��\�⭈�ƟH��zN�Z}����z�w�G��Pf��h��������8}l���{Ӵl�5`�Cs�E�s�Eݓ �v���3W��qU�Dž?q�4�S]_$���,(؍��2'�:7��AYD}��LLw�Nx ��P�{�~}@hf��5���j����z.�(�G冘]��r���ZH��r��O8����SasI��tv��!��VcA3����`�%|�?Ef,$,����C�H.���6B�/����>����S��L�,[r�J�3�����J!�u)=��'��|��TӁ63Mѭ�|�!���[�H��M^��fY��)ۭ`������R�ჹb;J\��"�o}tJ��7��K�8U��A�9�<��\�ӛ[��^�/x��)D���&1h�M�~<U��1�k�����ag��A&� �: Z�r����J#���O�OW��+��Z��%�QrA�1I�1(��㗷'$u�N�[.8N��sZ�"|��·���Uk3�&d?:�68�4����ݱ!Ȗ5E��a%�P�"B��.Șaj�z� �g�47����\�����M[������@���kް'f7p<�%]^�+`�F���^���6絍A��{��W�ld��������;Lי�u՟��S_�b�[�%�^�������*4�̜���i���9fgd�Y��a-��ٖ��V#&=h�{ �VD����v��b瑕QH�ڵz���l������iFkφ�L���U�w�j�l(1�U��TI\W���s-�VI�v���%���2�;Z�p�m6��!F6��iO��jLJ��wj��1�q��Q���7�����l��W1u�o̭3��`����UPX��28 �y�OE����SP�ы��"-�ۊ����ʹW���%Ëq�%�T*�v��u�x�U�,��*����SZ,�f��mH��`��}d��iW.[9��S�et��zA,�+X�_�u�HU8�e:Ry�ӛ.Z��F�f���-O�hό�����d�5��W��Z��L�����i�]���k��~ Z}�K{$l�>a ��j2��ih��:��h�c'ˤPȻ����a�u��+(o/:��u�gA�Ś�c�.o}B������v�y[R61�h3�?ɟ�27J�������O�����uR'��wX߈ @՞�=p�(�R�b2S�X�,#�̇�ݔFӍ�ɿp��y]�K��,=�Ft�,�)�D�u�ħ�^�'eZ{��J�,��\�L���� �~-��J�j�4��/O��|?;����+������� ��0ԠU[���#�E�^��BD/躻9튉�\���ͮ�������\�ˣ�i=���G��Dz��I�g%"VQ<IB�+�1�c�,�д�#�d4 �o�D��@O� �S�eK�M�Gٹ?fߪ�t�6�Ĺ"�N���2]��f@3��N��� �����P��?��ߍ����;{��^r�U��.��"��,��B:Lm�NB8���-n?�'ݹ�.�����ة�H >z�I>�軹,��Ƽ���~�e�;)�M��"j�I[��N�V´M�����3����Q�i��U��"J�#{�7����'r��f�K20�;���:'.o&>�#� �75� r��*J�-5"�h��ӄ�$r�����w�j���76������q� ����=�h;km�s��rI:��x�/���,�����(�.c�h{Q��Js��x S �̈�a�� 8a!�.�{��}UT�u���Pn*�&�$s�ޘ��ٔv��67���*�;"M��āsC�i=�z�I����A\�u�{Ř���_�R��;_E��y��`�r,�3 k�烜�|{Xy0�Wx�Y�Q"g8L��6�$r��5��9�#���!k.��k$3t��S�z�#��B�"�5a�u���~'�x*u o�[%��rZ*r.ͽ�(�p��j�C3:-�ƩE���MrN��~���lDj!�O�o�oՎ;��a���ʭE�)��J��_�(�Z����[���pRǿ�=S���l[�u���I����4�alY����z���� ��@e��DXGJ���s��є�_�<�B5�&��_M2a��5?J�@����,dJ����OciJÝV���u�u3c��=�?�}��'�Yk�xDkV�2B�=¢|ٍ���y ��$Q����.4Di�@ރp���"���Zz+e��4� A�&x,��}�4��};� �Q�ϖ�]����x�}C\ �DA�z�6;����wg��UV�1PAU��U�t7�DA�-��MDG��@^��]���6M?4`qqS�,7����G= B:�u�>��/�ee��tӚ.�c����$��4��HR CV�j�/��%��;b'_�$���s/�pu�Mf�9e����/_�>��ޚ�].���X*���臇��2\����W< �'NT�q�I���|dp��m&8��!N%�l;�KF�'R����u (�of^�<�rJM�/�H,z�3�~��.l-j��>�<͑/�T���n`q�έ�:�Ӫ��fe�j�U��k���+�~�2\����%q�.�C`v&M0��B���VR��
Static task
static1
Behavioral task
behavioral1
Sample
6e9dc104378193bb53930cff6fb6cc637c1984c242db58a334de83c55d156092.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6e9dc104378193bb53930cff6fb6cc637c1984c242db58a334de83c55d156092.exe
Resource
win10v2004-20240508-en
General
-
Target
6e9dc104378193bb53930cff6fb6cc637c1984c242db58a334de83c55d156092
-
Size
6.6MB
-
MD5
9c5fa444dd2f74135c6f4c9d6eae34ee
-
SHA1
3cfa549c0f6e3802826d1c280994dc90b17dbe84
-
SHA256
6e9dc104378193bb53930cff6fb6cc637c1984c242db58a334de83c55d156092
-
SHA512
de444a753b63444fc2b9b26bae7052bb0313fab3ce1655b4d4ae776d075dd8bc30bddbbebadd6f2094f07fd775f039b995069cc7aaa781299b7265071db4ce30
-
SSDEEP
196608:O+wyohUC75dO6y0oPw9BVC1FnObNOW/P7veVM:O+wyhKm9w9BUqbhr2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e9dc104378193bb53930cff6fb6cc637c1984c242db58a334de83c55d156092
Files
-
6e9dc104378193bb53930cff6fb6cc637c1984c242db58a334de83c55d156092.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 1.7MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.1MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 189KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE