��<u��WT������My�z/RـJ�qLl�5i7��st�O�y�#�\�U�r���ֺM�t��80vW��y����]E�-H�@���BR�y���/���.s#S ��f��~�<>ԋ5[AX���?���?W�.�T0L�ۆ^�A3�*_�1�Lܱ���j�z�1"ヒ�^q�>G7�A��m{����6ɚ��A6���یyM�Z�.S��z/�����Z���(�߰���Qt���W��D��M�|Y�Ё��uYG?Ӿ�ݤ��w��`������w}��H�V�-vi��hq���4)d�V�X��:�@��?�$�� J�,@ܯ���+{c�)�Y��+e�؟���s����ͼ�����`�d'%��ww�� �ލ��a'�||��mI��N,u�S����" �+t(���b��{�M�a�%9^ds.���Dt�ռ�4>R�,�sPK���F:�VMy��p����O� �#d�M��Rz'�ݔ�e�T����q�jUȞ��,��v���k'�����{/hiП8�_Y2�3{A�ò��2���(ʱ�W����������Mf����p���?� f��%�� q�s�H�0���FLE������Z�0t6�q�&v�sj��x�c���틓����ZÌT�?�|�8N�ņ�J�i�X��&����öذH���Q�TO�6�7|#��~-���#2�r-�Q��og�l#�3'T�hr���`���U���#��j������Ӄ³1!4����wp1n��t����P��3��aw v{���K(�_s���~�����!���2�oK��;P@�����*'��R��<R���v����f�d�@����)sk��~6YMJH�Ic��;+e�*@ר8�v`�L8�W`�Tq�J�՛6��u�$"���tH����b�H)+b��h2���==Nw[?�+B�������9c��TY��b3,�+��}g�݊��Q��f��] ������j��J�5" ���"�Uojz�Cn��6��8�ζ� �qN@��@dO�}dF�s�_]�fCgJ �� ��Ha���U�)g�)xz�A&gaM��D�+��}H�� �����Qt?w����߱$�& j�����@Fb6�Śj}�=ӛ~���+��&=3F;D��"���s��h|�Ua���ر��<���-Ƨ':���HV�RL������DsYeU�&��(OS��m�] i�������{J��DC���p N��^:?f���p��YC5�讴��\�,Bק@��{�ԧ���o�t�,��h5�a_)?H��ȳ��~�v�d�8G������5�[�����Iv��낣O��C�V�:ݎZ�:[-�ˎKoq�]z����E&����k�������v��$��Q1n_llܤ���~��tw��E���>�7UH\���{P�f�����1��j4bp�d����n��Xu��l!�f]u&*��R]B!�>DLzU�.�n�+qH��bs`o=)mLk��0�9�S@�Eu���-�N)%�K����i-��z:������\{[�Paj�u�p.v��+ߴ�a�ժ�5�_d;���2/skm�)O�P��W�M�u���fm����$�YԱ]�J֩�� ��C�^X�p᠒�p���4W'�� �Fz�����RM`�Dp�<Щka7K����k��n{��~��~�8������% ;��rV?���}t��6���@p�/�.Y+���i�t�%��Z��F����%�}7�?������ݹ:��P �Q4%�z$ъ�"����xNϧybz��A�qi�NLɨC��U D'#tT��"�ZWUF̙��(L�VH�E�YE'(�L2����G�&��;�e&��Ȓwt6�w�A�L�Wr��3�̃+��v�9��b ���<�S�����g�l������(�)5!�(����[�Uz7 ���n}�-ڍ�BNu��1Qf6|��)�Q�!K�q?3� @m�������5>HS�kEP�w��vL"U����q�D��R��`��d?�lk��ݔ�:�?�5$>F����Ӏ����K%PX�A��^�$kq��q�"G�t��� ��MΏ����V��� [E�B`# I#{=��T�F�L��x�D�E^�*�y[T����Z�RA/w�<q��:X�G.PU�QfzM����l����âgH?|�ƔћG*`Ľ� �e=R uS���dXx�xB9�V�b�%��9�����ӑ�m#o���S�C� ��h?|����>�wԵ)�=��v�k7���v-��%�6@���Ԙ\�����V�S� g�x\��3�SX�L-��a�k�$k��P�;�t�,���Q�,'��1�'_'��DK�e/��<�WEg��(�S�$䲗x��d4�4�(tv�������'���+C��_�����wAͳPw$2� ^zU�wj������X�u�,�D1��xz�*�v�!�P�!`�ӫ�ʴ'���L��6,RI�~��*�^tVc�,D�t�1��(� ��gt��G�4�����a0��_2��~�Z�!�u����ޭ�g1�伐�����ϫ�ԕ�>gA��`�[��X9�|O��!���������B8�wl�-�_����E�O0��KgX!�9O�8C�\���n{��.,i�� M�ϡ E������;6�\Y�b�o�� V�Km�ļ�@�u_�7C�^��S��#��9�|�9�W#5�^^��5]�5��ָ�x�����;ϑ.ae\�z�VtyT���m��!�����gh�En�;D)�ښI<(�s�~]�s�C&XL+ܤ�4��9ȹM2�#� �.B�����JeI���r���Ç����<R���&n��ۉ"�+#��7�2K�U����GAH�S`�/��ӂ�Q��Fb����X��W-���R ��ҭ�X�M��w��h��S1�sfq��;u�e�w-�{b@���ȯQ9k������5�+�R��U��1�p�Σ���:��\q�wR���;J��5���S�kH ue5ա��4�9:��0�D��#�qF� _B�e_���`�f�M��gږ�D�������z�O�����fa�e"(������46?e����g��rvb�c���[���rK�ցx�4o{����m�n�ĸ�-�����p./�y4T;E�8���9I�Ș�dz�W�+���� �]�� z��N��e�%�̘LEUn��XD���}~��˽�H.mRy6(Έ�W+���N+|M��IZ��� �g���g1�c� w?��gF,x�U�ǻ�Xe�� = )g2$~�K��/��o�T�I1I�u��8���#8���v��J�kgSW�)*�r���B����,��GGi�u���@��?�
Static task
static1
Behavioral task
behavioral1
Sample
60d7123cafb385bba287360f90d6f682c6397f8feb030ac0d36f4473b779ab3c.exe
Resource
win7-20240705-en
General
-
Target
60d7123cafb385bba287360f90d6f682c6397f8feb030ac0d36f4473b779ab3c
-
Size
2.4MB
-
MD5
96abb53059a3d749188008a41e4cf448
-
SHA1
47d0209bd0e28f90c62b63ac2c03bfe41683cb67
-
SHA256
60d7123cafb385bba287360f90d6f682c6397f8feb030ac0d36f4473b779ab3c
-
SHA512
dc4c739a401032cb802a68b65754763f2edfec791f07b1cb23a89f43f35daf4445fa2399570c169a66d34d6d731c65d84e5bc07773e045c7bbf86d073aacbb2d
-
SSDEEP
49152:V0yU8Z4mGIeLQSbvsWTjEv71gQ/gBcejUJEdSsBL8gkSmzZ:tl4mGLLQSbNIFQUVw8gkSO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60d7123cafb385bba287360f90d6f682c6397f8feb030ac0d36f4473b779ab3c
Files
-
60d7123cafb385bba287360f90d6f682c6397f8feb030ac0d36f4473b779ab3c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE