�D����ťޙ�Rcv��Ȗ��>����89�l�n`=z��ϊS��9����w�{!���Մ�a���=���[�+"ZvӺ�O%�P����J��]����<���x���(fȷr�� �+�`.���@uDO���w���ܐ��J�LWw;"Y�����6J�M�B�����A�Z������J%����C˲p�b��=�1����`�_�TLtԁ5r�L�o��(�f�҄N�yq ��_����S��;ܨ~�B�ЫMg���Jͷ���O�M>��[���M�{�=��G�P9Ë�Q4*��n3�+� H�p��%<��}(�R����b 0�beX�~+z4�UX]�X^��{ q38m�1~D�UΤ��K�r@w������Y'��3�˗/ne����<9���8L�+���U�3�$��Ƞ8��:L��h)j��a��؏�1��hD�;�� �~�=���ǡ���~�/�~��p�A8��K�����<�6�J.q��]VT_c���;9)qF?^�/ȊW%��$�$keB�m��}L��]D--pɷhŸ����Lh�u�s���`�ˇ F���?�Z����o�h�8b�0/��`?O�d ,0�W����B�;[���A��GF]��R�`�����jK�S9����gW����d$ǖ�-Ű=�@�����UD ���Gs*T0�:�UJ�)���s׆�W�� ���U'�����Tvcg�k��7����j?b�>�ƪ��� ��0�yH���;�8���l�x�4g{�bai��u�*�!�s�t�Ĭ�^���s��*�>��/�+����?�&�GQ�=\��&�g�������m��L��MgY�=6�F�ˍK9YfK����qKɷf��� %c(0�j�Bٶ�@ ��� ;��ۃq3@_1�=����n�~؇�^�@p�h��RgS{ QE�c���"$�\�ӌ˿3 �Ji%��(rP.�5�#�Y���X�)y�F' ����� �7C�\S�V'�YPy%��_Le��[ܒ.)R���w���Vvh���F>�E���%+�)-aL����eȍ�� �ר���[�����#{�Ӳ7υ���/k'�s/��E�`N�>���Fg�[�f;�!zu!c����r��6�V[�{2��B���8 4��� �h�!r��5-�������?J�������!%��O qy��h��)��hL����6g!±����*�(��|�� �P ��09x���з��Ol�c.LA(��"� �4�a2$�\҂x�P!j"�Aq���-���݁O���1��)�'�Z`��[ ��Z�y�Usa�A2�B%��6MG-��z^NR��V�-�菥X���>�%'�T�{��mW��O�W��zik�>�A��dn,u�5ջ��#�N���>H�M���s\�[��� e�>�,5w�m�u���1Iz;�afl�Kr���45�|x��c��)$LS���жF�u x�L���=E6o63�x��V5�k����w�F����A�﵌��XTZ�<!<3��3m�-��ۻ�?��7�8)@���(6b�9�t�_V�g#<���WC��SՉj�pU>j5,*m�Y S�J�=����1�� c�����O�{���c��d��0��!@�G��Q^_�Q�k[���Y�]x��A���kjž^����d�(� QH�BQs�E�r����t��-c�7j��׳�3�Ha�ۧT�U7YHL�t|�?�ތBX�г��+� �㴞ƽr��W.���"�}�2K�W�=�B{���3�0::�[��8��O]�967�\V*�G����|l5�4���w�{%���2�B5p�v���q�����<(�����F�P���������c����G�E�b��Uep�!~\2�;Ż�$ ���r���Y��!"�ɧ��lG;��RFHu���9���9^D�t���9������9�N͐wx+}��Цp����jyZ ;���gjy.ۛgsh�-i�W��ͻ��f�l�E1��N��_YyM-hA����AzEC��e�����:N�d+���h:�9 u[��D���7����o���7.S!���{�-9$��UĺI��G4�^�c���x|$r>d%A>�W%g#eav�n���?UTk;3�<��ob�����̅l�Yv�ݭ�;`�=�\���l�8��Gkd�l��N��B�\���f��9���������H!8�C>��9��D8�TEB� sr|)Y���\6� qK�sm+!P�Y��0�W= ��C� �R��غ��B�m;Lc������K�������H{���77l���=jGĮ��!��(�~|�aWq���>��m\t3�����*A-���-����egğ�rdtJV0d��X��QA�7k�M�t�7P\���g�,j&�hX�@ ��q�հ�X_��(��g���Ba (R��{^�m��ʠCV���8"5*l4U*������jh�$lk�4L_:y����x�; �C����m�=D��k�iݭ] P�����%yҦ7�9���yH�e�X8X�R8C���),E[2ȶ]�Қ���4߾�67�$�%# �����&�Y����q�}���}g�Ir89q܈�I�ك���d]�Rw�!��]��́�9�ÌDR��$��/20�:��R��x���8?`���6.�7te�d�T�ɸn���ܲ�0���G��H;e �-��� H'O�r�U��Аh��萉O�����h�a�d����p�ȣ6�������h\ m�4�Az^3dF�ۑ�S/&����DMJ3��F���0�"7�� Vٳ� ��^�"2��;��FV���b(<^f�o,�4#ǹfjI���[s����mc�uW��'��F_ e1Ȧi�GI ��p`��ǔ�A>i4n�����3�����'ڌ����Z�U<�V/\CҸI�6.���4�;u/YwӹQ�?�U0�&&&�m�n�!H�\1����^���š|����S\��Q(|���Iz>��U�߷F�H�u�/ g���W�g� �Q��������9�Ru���A��N����iv��6�ύ�ڸ!NwD�@P�I)�~���£�O�E���.(M\�c�=($��u�Q�Ǔ��A������i��w�gu*�oxZLų����3�E�rQp�IKE� ���a�6�_��τ2��=,.�0�� ��(7��;5���W��S<m�2_z4;mx39�\��u��-�=��?"�3|;�<r�+@���-�{�.*f��Q% ��k���Gj�͒v�����t~vs,>��q\���S�-��jъd�=&��rW,,\����=���'���jS���T��,�f����� ���c��M˺p�g �x������V:(3���nl.>�����F��1b� �>踍�;_��� �n>)f�����vm��O5n��עIE�,7�/L�m���%�j�������\��ըk�*��Y���/e[���,R�����L~S�� ,J���)&��mBd"�rD���ŝ3����}��@e#xd+��ہ�� �B��+�(ӱ�9>:@dU�<���r9�����y��BZ���� 9����
Static task
static1
Behavioral task
behavioral1
Sample
62079406906ca46e1c65e2da03a8e90a2e433ec5e1bc21de4ee59253aa140373.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
62079406906ca46e1c65e2da03a8e90a2e433ec5e1bc21de4ee59253aa140373.exe
Resource
win10v2004-20240226-en
General
-
Target
62079406906ca46e1c65e2da03a8e90a2e433ec5e1bc21de4ee59253aa140373
-
Size
3.0MB
-
MD5
943fbea2866b0cb8d09c89cdc181065b
-
SHA1
da04235ea45d857407cf8e000ffe5deda057a13d
-
SHA256
62079406906ca46e1c65e2da03a8e90a2e433ec5e1bc21de4ee59253aa140373
-
SHA512
e37122a52d17fa8e301f09774675cb2e23217552e3258d3d6d93a87972aab2415662361364a67ee99e07edfc63997e47286f4477d68fe92861742ebb7e49b557
-
SSDEEP
49152:KfimtGKh83blQtZKL02s20jfr3DlZto4xzTs7UFZwdqOYeIqh5B6LmxwVo+eZrdt:y+blQtZrf20n3pZt3IgDOsm47idlGRyJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62079406906ca46e1c65e2da03a8e90a2e433ec5e1bc21de4ee59253aa140373
Files
-
62079406906ca46e1c65e2da03a8e90a2e433ec5e1bc21de4ee59253aa140373.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 340KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 292KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE