;���yV�LL���B�#L��䃿�0��v���.kH�����ʇI)��.p���u����S�wF�+��m�)k������:>ۼ���,�N���nZ,�ґ� 9t��3e�� _�h��R��a�d�����pw�x�U#�o^�9�_�� � p9����Q��/�� OR�G ��\�E��CC$y0��l���ԏ����G���ׄ��j�M6�!K<i��[ߨ^Sڌ[���&���@%�Sَ�Ϸ,|�U�ku�PZ�Z{<�:�;�NL��P�e4��<?C��X�^T�ъ}l���X���Hl����Ao{[��|�E�/0�e�c���T,�����K��Yz]%r&��Ԇ���&�2���6V���ьNJ繳��>��`L��0�';�*�6��/駮0���+VӤ�.�Bg�)a���Jb���$��܂P� 3�˳ �vL��!qr3��� ��O�̅����"z@4#0�u����@EE���T8T4_k&�������C����T� �z�#�fA*�t�>e�����ptm=����b�!f�^f���c��g"��,FF�X��(�XJ��#iOnd�N�D6�En�A@8���8��!��q�㡺_�2ff���6ʹd����pB��/ �ݶ2�&�f� 04��D��|O��)#A�]c�R��Au7e$�B��XC��YJ[�xVT�@D2ϐW���Vg�*rs ���O��/%Vb뷎����?�8^mx���{-=Y�#=��4�0T\4�F8D�rw$�4��iD�`�����%d�mIi�}7'��`���#h�8���l?�1>�� Ť���_A�H����|���d?�V����(�--��c��U-�s�g�=W\(F)"ÿ��)�o���� (�7�d�E��XS�.<��Ԡ}�ʍ6�� �[i?�"dD�H��m��8� �=}\p:b�bF2H�(w���`������I���R?EF��E���5�ٞ��LFl�՚������<�)��E�sJ!���&�3 e��h���wo��6s���Զn��+-��J���J����r�D��T�4��l9F%������1�v�������?5r�ڇ너KK͂9|y�;h?��\��V��j�>`��WT������3!G#h��<�a�d3j�AVp����o�����;I��s��ü��$X��;%������ȇ�G�.$4���L��&�L,��G�-[���S��'N$��킥�������|Go�gBo -�mu�_wv��M���YL;�Gû�Z�j��e�]"�)Fρ�1��� Ah�b���ͥ�ޖ�p�K�c!5ke��U�L��LWFvQ��͝�h������9��1�V9B��p�g0��.]w��\�×�%�&Q�гrN�����o�I������V���~��}�����9e����+N��<f����s�E�%D[lM������������o�$�^�5����.ӸG4DU��gi<L�n�/+����E�""��m`4Ju�`��Y"��2(��R�q�(��E'��<gylbi-��[�3Y��&�]r�F{� �P����Z�PC7����������c���^�ݾ�6.��5*�6����Ĩ����?�3'q�9�K��!�4`M�^A��n�M��uC'*����*��.�t�g��G�a!Sʥ�� ����'��Ԗ���2g�uw����� �1K6<��ČԺw�mV�I��67�)��r�m5�e���֓:�x-������O���-��'��#SS�U�7�x<#O ����#�W�.��ա�?��g�_b�/��m���뼗�Nz�d�r���l��wY2� �|�}����4����6' Y)�!JX�������n�C?'7�K��ɤh'kz,���2����l/aNQ����(�XX�Y�FX��p�I�~)���q��r42̴Ю������O���i`������0����xM��c9�;�Ρ���3�y��%���"&��Rsj(�y�����|�\����K�,�q,X���F��<�.�ĥ%�^���ף��P�u-��9��k�sh�����L� �%���2%�2��džoQm�p5p'Uw�=��u�$�[5K�d�o����&���D���ry�{8WP'���5��xT���z�N,a�_~��6�H�n�R�G`�����y���Y7Z�O�@�_�� �p�T�."�`�B���N�>�䠄��y�oՅ}�݆���@��T5����t��]4�R�S<�ay�I@�1/.J�x� %Ӳꂱ�<7#W�0"��8��%"uXi�*�S��=�)B�#,��h#�����Q��3�=��FGD����B��5��aw�T��%����6�1���m���R�58z�1���ڜ���s�9�v֣6����(�9S2�h�����pͬ�!4���|흞0y�����@M���r��ka��� ��z1�,�L��y�0k�r�T��_�Ժ=���@[��;�r���;����6�h�{*�Q�IAjh�]�ն��z}�K@�?+$Aa�yP��47�d�׃��&���1,��i6HV7 ;ᷚZ��$��O�'�4r�Qj��d��-��נ�@:>���%�c���Ԫ>�>Zܮ>�(��@>p^.Hs���ڼ�����*�L�Es"*�y�3u9LˊwS�����c�&�? �'���֛<N�U�e87�i�PX�|]�߶��:]PR��AD�jT���7����6b��>'ʆh��2=̾^�t�:�;�n�@lj3���..�^'-�8i�F�uQ:�)>�?���-H@e��b�83dc���"$�T���]�����d��a5~���T����@����;�T���n�����u�n�JHpm�d���I(c�#��;��kO����}�4wq"ρ2җ}�I1<:�I�&�9��y^����U�����u�Mm���G����M�&E\�^�L3�c��)5����s�f��� �=ޞ3��z��B'=�~H��Z���-�A���� ^o� I@���Sg�1��|D0�=�aC{w]8A��]��������z�� �
Static task
static1
Behavioral task
behavioral1
Sample
6b09ea84b2b82f09738c20291c006dd6b2e0ea18fd1419d683fd4cbc96b908e3.exe
Resource
win7-20240704-en
General
-
Target
6b09ea84b2b82f09738c20291c006dd6b2e0ea18fd1419d683fd4cbc96b908e3
-
Size
2.3MB
-
MD5
a172a633883700f3cbf25ed1ae260a2f
-
SHA1
7cbd7a29423eb3f2cd3a7560eff0d83fd6567539
-
SHA256
6b09ea84b2b82f09738c20291c006dd6b2e0ea18fd1419d683fd4cbc96b908e3
-
SHA512
60b52f4ed479534c1a072572ebceffb9b37ccf48099aeab083e34291ec2c8fd1cd7359c8287a9ef93facaf4bd74f97ddbab90e7dfe6473f0a98fa9e1b215dc39
-
SSDEEP
49152:klrnW6E1DoLNTZMrKbvTgs7WIKM7rpgkFojRe9avSfl504YeLg:kJWFo5TSrK3/7WIdGGwOTA5eLg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b09ea84b2b82f09738c20291c006dd6b2e0ea18fd1419d683fd4cbc96b908e3
Files
-
6b09ea84b2b82f09738c20291c006dd6b2e0ea18fd1419d683fd4cbc96b908e3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE