sdnm�uv��`M93�4����?�v0���� �)3��@�/dm�%��IO�\��< &?Z.d辛jj����(q�U��_e��U�m����҈�Ld�A���)�0��1\l?y������0��$������bԵ#���:�I�����F��q�l}y�Acmo�҃���2'�f~:T�Ad�e�-�a)gx\fL���jSۂ]8y�~���>E�q4`���x�R����w�v5-*��>MU����l�lrFL�������h��Ȇ��2�fr��!3R@��_���'Ӑ?���RGP�*W�i��%� p�D�3=Җv��L2�rYh��b��`�z�K����윲0�͞@�s�>o��ң�{2��,E�hTI}y�|(��l�ht$t�Ь*��7�\��3�%�m��bPW5��/Mk���H�х��Yp�it�Wjp6�oD���ݨ!2j�K��q�a��P��D|�*;W;/�@�d����Xc%ڜA�'5PΡ�6h��)$�a~%�������c�h\:5q��~m���Ft��2� ϓV^ౕ�L�LAFSm�����Å&^d ��2ѹO���I�*�.Ae�Һm�Cye2�נ�������K�M�f}�I\����ET[Ƞ$$MK���!�����'�� ��.sPct�)$ ���J�ցf"���o�̀տk/�6�R���[���he�B��.u^D[������ronS��e�=�fzl!��:~�y����e�-6Mij�;� #�>0���w͇9����H�7��»3��md:N�`]L)����ˬ\���)���p�h�ԁ~�az�nL�[��E�{8�kK]!ϳQ�>��+���8�[f�W���h�K3- ���=�G7ȧS����M�I�v����7�7��b1|��[Eum��&n�)m1�0L� c!����P���#�RMd�Wۡ�����<�XCD�$U_���*�hc9�������4�g����Q>�#-�F�a3=&�YH ��g�ty3�\��]�Uk�J�&��V�{2����zw��qr��� R�bY�.��Ϩ�� �fc[/��A���cN����e��M���FϚ��AW�q�ꨈ�N�ioH���ncsK��ct�y=qm��(x�B�q�K~�Kh8��=�1[������\�;ţ�s7ቅ��˚��^ə�g��S~&+����?T���>�y�/�_�&�.��ɐ%�+}_:�l�<i�c:9���P��e2���0-����q^Z��?����y�_r2/�Itցc0}��&�"P�����̾�ou�ӈQB��l�?l�F{��Tup�3���jۥ�����[�Uw�����.{By�g�z����qb�~ߵ+�e���x͢�/�])��w�_��i�_ēg(B��/ճ���PU8�z�����;)H±�M���ɉ5��B�RrJ�0zd.G�`�J�c>��s��c����<j"ɠ����PV�L����GՃ�XT6p���y>�f�{�����u9�q��e�Ā��]):���d�4xJ�u� y�[��6EoSLvG߅���:[@���K���y������-[����4�~�љU^bjߎ�'� �9���pTA�F�F��� :p��[Ao��idSN'�����s,����-��EY&���D�jw���9��a��5����+�=f�J����UЕ$Z��ۂR�Lt��&1��z`x�p�N4�4����� �+#VB{F��<:n�R��8��C�m����k�W���3S!��oB-.츳ν�'�p�[�|�7,<p��*� 0���<H���qUA k>�VQ���������|��Hէ�k;a�=�:̲�I]h�Z���V��3 W��?����td����k�T��Æ�l����Yp1�-���O2�^�h��n���~�1wG��}� ��\�H�KGZ�q�x��*0[&��e���Dd?���Z�g�.ʖT��e��u�h��[A�w�BL3|cP�Qz��N��=���W����=���T����E�����rh� e������S�@g`�L��P#��_��RޘRY�#a� ��U/��z�_h�R�����՛����x;:F;A�w���4Q�-�WD��9��wR%M�ۂ*:�)ЁS����Vt���x\���C�хtD������j���tk�ك��XBC��y(�s���%˦��eo��X�5h��'�r����V�3+᫋�����= �|���;'9P����[e�9�?H����Ӿ�!���8�[�y����7����)�S�_ Vtٓ�E@�K �Ϙs*�e��8����d`�P[��7��=B�`%������OhT�%9ַ��v�t�VP`����]���e[jE���a�"O�l$� �� ������0f�?��DZ?�j�4i-��Ц�M�y/� �-�����\�5# ��B]ٓ�{�W����8�Qb}bUN2�@y��� Ҙ��>?�Y�=T�;��&�5M��e��l��9��O\]���;�$�@]ϲz�����F�b�6$���ݏʤ+k��}��#�'$n�����/���з�H��%r����eX�� ��R)|b�.�yΰas�����#`Ij7�$������/ޟ�lfLa�:�\Ky����!�+���b^��`�݃֠9������˴�Gc�� #:֚t�2������6��XNk��͇�S�UΊ�8rW�������u��(�YP����"f- ����^^�lm����� IR�Sk=A�ҍ=�8���=��V]�[n1*SM��K���%ƝAeO�:4s]�Awϳ���*�5�� ���b�SF���d�~M����>Nt��j�R���������4�T�O��X����E�J���AL��w�H�;����2��Q�lv(��~챼\�}�d�Z��Db���k�^aG�q�>��$]���B�6�����[;ZF��&�}�M+G�� ��h2�iV.�Eb��(^�Z��+%����K�Dd1'ә� �C��,<�x2���Y#B�e��h�ouEeg�R���g�d3�[Nkn��4�6�⫗𥘈}�DF��DV`=�d��(0���\��B�s���"�=�mX~�z�Ё$ܔ :91�K��s�g�;?-��VV�T"WaO}�S�g�������aμ�i28�+��y��_���V�Jsg1�J�I�E��[8ɫ'�3�&�����d�<]00��Yr�6�6+T��[u�&��v�ߊ�� Z��*��Yh%n�w��ܧ79��)��R�*��:�Y�{�kpY�g�ƨ/=y6 +�Kw6Q���F--����u|��c��� ��%�� w�3O4��* bZ\���|����s�K��͇�U�#$j!��2{�^}V�m�� /���q>,��S�~�+0+g�M���7Q7s���D�w�@�v7��d�w��d�����2sM�cw
Static task
static1
Behavioral task
behavioral1
Sample
e6c76393ad6b5516ed6e84adbd0687f981bf3c419e99d9c235a6948e63d383d4.exe
Resource
win10v2004-20240611-en
General
-
Target
e6c76393ad6b5516ed6e84adbd0687f981bf3c419e99d9c235a6948e63d383d4
-
Size
2.4MB
-
MD5
e3cbb274e66e95a1b7ee5c05d87abbd5
-
SHA1
93d96f3d0b6e5d13242c88af9dc9648cbc60fd0b
-
SHA256
e6c76393ad6b5516ed6e84adbd0687f981bf3c419e99d9c235a6948e63d383d4
-
SHA512
8fe240992730512b3647140cdc14ee37a94c4b3154b787460bd1a30d99053e48d2e5fb20ac6342b0ec2a36c998d78df22d9f81ee9e49cd303ad8b6ea51757c76
-
SSDEEP
49152:RKDGF/PBHX6rO5BbkxcCEPYYgFxCD57RxIxBbAVHPEQgVMoyPDK:RKqF/PlX6r0lk74YZFxgnxIDbGbgVMou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6c76393ad6b5516ed6e84adbd0687f981bf3c419e99d9c235a6948e63d383d4
Files
-
e6c76393ad6b5516ed6e84adbd0687f981bf3c419e99d9c235a6948e63d383d4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE