Ql��f�:W��~����^T�㇊ ezPé�,��Ᏽ�/��I�����W����r�l�Ķ�J���� �l��{��|ѻ��y�=t�@��7x�� ����q���d�|L°�a�*����U��!p��E��ǃ���A���Ys.�(ae����T�+˦�\�����D��)s��X��swdJ�RA���?�-�����E��F�����kOJq�h�1�tN�+C���Q�I&i�eR�����=˿��[lₑ���B_골�Ű�>���x�S��]7���D=Zy���a�21���D���K�ځ_��䅵�xmN���u���Ȗ_A��?럳9����.��B ��:����O����O�����F�8Z���|� �,Z?�ߪoR���7�[(?:U����m������F��ܬfK���v�r��4���pm�Q.=��b���� ��E�^p�5��g�����;�y8��(�2g5�D�c%���1��Vj_ڰ����1��d.~���)��D���I��9%v'T��[�6�ɂaf��j�8���4�=�?[����n ��iU�YDA=0V`����NJ@� ��U�(����=Wb���wU��m��PM$%�����z��..�E���cA���>�����x���P� ���Ij�Sm�� ��D3E.v�K/�9�65�?e ב�4d�����`��_�����<VtCh������C ѱ�4��У\�X�ͨ��M��y���A���f!vi%��s���u:�[�dS�u.�D����e��=�� )�^�d��al�� ���h�A��V6�`�����H⒦|qG(�;ww���lbѰlD����ʷ�v�Ien���"�S�-��'�0_��M�4�H��X����egF����5j�͊�4�w�q�|�?�Oj~y�x`�Q�[<�ɖVE���H��{Ѣ+�Ǫ�����,��(�Wڕ�(v��i��� ����B"�xo��|\Ht̀�,�O"M�t��jz��~Jw����5�0��3"�d��uU_(�)�}��¦`���D��j����Z�1��I��d��H�|�gò��MĞ��@&��WF���Quu������Xi�� t��z75p���'��ѩ�d�m��JQ���!r\��F�غ�>� ����;�,_-�I����}b���E���]� �|�̽��h�WL��'{�-�k�����aK�n�3���*��`�����lÍIp�W����'�D�Y�p���� ER1�������j@����5T�6�< _+�i�!��.����]��,;���^��Ɍ����[V��|��2m��6{�a$u8[�` iS��,�mڷ���zX\?�Xx�d��<mꉂ.�?$~�"e�<��� |u���/���;�,�S�(�;A�2��|��aך� ;V��)���y-F�r�)A��q[� �L�O��^8v�T�W����`�s����9����s/g6�$�����U= ��u�����?�`]dd�o���h�?&�{�fԞwi��]������ű+1Ws�74���Vs��CAᥥ��6�9��X�Z������/)�R���������O?_��}ݷ��<�[�����N%��anܕ�p���@�����5Γ湭%�+K�+��h��e��c}�L��G�E�=����m�KnQs�p{u�@r�)�Y��M0�c�������m�}{�F{����c�����*�? ��rEsCB���x���6 YQ�Ď.6xj$�Y��f̱1E"wY\;[3̲� 2_���4�,A��?��RN��c?4j)֖�M�#��vO(������)s�-�O��üc����~�^1�-fB�����^�(��br<<�*�zs�Z*(5U��m5�o�rʎ����#�2g��>�����Y�W���M> ���n'����z�}� ��즷!��ه��\�*��(<�ot���(�y�w�fMǿ�j�ܑ;慒��t�ΓI���0Yb�_�fyІo�ȴ�x��Y�=��,M�,���r��"�����/R��D��y��B���O�������Ԩ-VJ������.n[:f���\��?�4SE�\H�U�8�~��mMi�e�?�@Gt���K3����3��/� �g����j?��z����-�O���f��S��^��մt�η+n}��E��4$N�Mmz���t.H��n?T��!}a�7��ك�:�r��O\>o;�W SƏ},�^��Q���j��f�N<��S���yZ�f��1 g)̗{��/0^oW���@2��4��_ �7��F6=O�����5��dh,���X�r!Q+�d��\�mHd�T�������WҟM ����"a?y���Y�y���+���1v�i��d3TnT�h:$&v�8�fi�j�������'y��E�]���*��:m4��_�r��H �b�-�����mA��iπ8H����0�z�q}�٪a�k�'Z0�(+��o�1���)�����G���c� SKŦ�į�����?ۨ%�lNd�˔yf��A8GCS�!Uz<���ɓ��K�N�œ�й���1�*�J�|#&�������-�Q�� ��W��8���|_�wS2TS���Y%O�xB;f^G��]Ȼ������H�����.6��o!lM8�0+/3U�\k��4����=��4�#������v���ΤN��.��?����c��� �M@�=���d����ܚM��]���~!�D�8K�t��^�bw<�4�Z~Ϻ���>Ц��\a1�9KL^�������a���Ĩs���e�}'6���z;p�-O�m�혲�&]�*?4;z3���pL�6�|?>n;�5��h�����;m|�N�~_�/�#%�[R8�?�l�M<]A�y��x��y���Ar�ޯH/y�^9�5�Oڝ���!�-�����ٍ��,C�\}!_}=/;y�� ���R��pvn�"z���2.j�)�=�2�C6&_�Ƨ���V6BPQ5QQp4�!ه�m�=m���oh,�с z�X�`Y�,wD�]���_Lx!�)/v�́Ij���A��a�4�v[_��3r�`�!�����a�=�h���Zr�΅��K Ƣ:��B�lF��f|�[�����>���"�\��
Static task
static1
Behavioral task
behavioral1
Sample
c6a63c24a3a30359ecdc252a7d48ed473d3ad09dd01c73cb50dc05200a87e453.exe
Resource
win10v2004-20240508-en
General
-
Target
c6a63c24a3a30359ecdc252a7d48ed473d3ad09dd01c73cb50dc05200a87e453
-
Size
2.3MB
-
MD5
cf46f108683d63f6c2d85d31d286fd85
-
SHA1
c177dd00405db950f867ed5c5aaa40747efa99aa
-
SHA256
c6a63c24a3a30359ecdc252a7d48ed473d3ad09dd01c73cb50dc05200a87e453
-
SHA512
1a3560efbb5521a817bc3086734618d45cb60edd5c648b5431e5d5ad23cf3814962ab128d3f26a8ee113d022a8136e42686ef6ada4d54a26885ea11d12d87f2a
-
SSDEEP
49152:uTZP1jj1/o6n1r6BqbDImEGAfSP3dMTPTBvH+aGeumRMFQ:wNjNwaDCp+tMhHTGkiQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6a63c24a3a30359ecdc252a7d48ed473d3ad09dd01c73cb50dc05200a87e453
Files
-
c6a63c24a3a30359ecdc252a7d48ed473d3ad09dd01c73cb50dc05200a87e453.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE