�rY�ˣ:��"p�����݊w�Ka������L2e�����q��0��$d]�=�OZ�o�59G�����2A�ݴo5��z1�H��&��c;����<����`�b�"�5�}{�n��F�)5�Π��������l�g��ª�zH���k }�U�R�D��~�h}�o�7�A��� )B?��X�>a���8��T>��*c#�R?ajc��(�l�}w�ȊJ4�mȡF��MH�������W�Zq�?���=��7�E�iK�� N�i�^S] c_tI�2�.D�PB̸&��ӊ\���my��u�o�F;�#����9�:�i�2����<�p����}�#�`5J��d^�Hy��-�^Vn�g�pj�� x7�OHoH�l����z�?�d��w!�s[�־m�&j�,*�B�tl����֝�nM�\[�XpY������y�����ܰ[��� �J�4~P�0 Y�x�]���mΨ3��)��x��&��=��d�baR"��:��P.i�L(� t`�k�'Q/���)�~X����N�ˏ'ƒ���Կ�E���w�w>S8�������9�A��;Ю�5Nx�P���%ΐV^ɧ�nc�3=�֝͆2��!�F(���d�}���k��*!8��:]X��hȭ��^nZ�(_���q*w/ZC��Y��j��frO#iW 0x�q�ҚTI�ߗ�����o�թi]�}�e��~fW�l�iF]�i�u�O,���I�H��Q}�}aW��-��~��Z�Y�j�CN���r]��H$��!WR�{v����9�r�?��Ϗ3F\ ���}��A�����E�%w�T~J-�.=��h�����!�P�����@�G�'�5^O�"�x��\��OG�W���x~C���X��y�{� i��ڣL����HWl���:�B�2��R�I-q~�?*�a7�%�y�r�����3C�Z��p�� ��O����B36�~w����hzv� 3>Q#�)@tq7��k�s�R(B���N�6�r� �p����Y���845�d'B�f/_����/��͕' �'`�/4 ��OHFK�|Gһ�{]��ul�i�ZH>-�i������]��cY2�ZK۴�Wy����d��v��Q����v~��ʖx+J�/��2� �]���5����M(�JJ?��s!?�J*��˵r!�T�)(��?��7/ؤ�Ў/ګ�1I×�2�1�3-��3@�HO]J�3- /�i,��^]n���z��6� D �c�nػ��a_�[ʟlה^�Ko���Ԉ��C��ZJFUH�b�{"y�ì��f�3���.��iI~�k,�0ҕE��t�)�z����n�pyv��w�$�'���Pk�i !��%F�U����uh���乏��+��CQ���K��^Q���vI�'GH6,���zD�1�W�.�yA��U��y��c�Æ����.���'�W�̹2wHӱȀZ~t%2yOq��gc��^�%Pm��0�Hp�R��B�� �GM0s������C6ӆIY�K�� �mk$Ǒ$q��a�0�pI?x��7r���HfR�a��"Tm��R�@�N���C���9<����z�r)��%ˌ�m�G;�$����3,5l_a�aXa�>܅�o����zS��܌U�-�]�)U �d�V�c��G�)��� �Mꖔ_�V����E'X�oW%ݷ�d����G��|�9�/ۑ�"�=#;Bo�.�OP����z����� l*��3v]�f�:ih�'�^9wtdvW�X�IR�@� \܂��e��lv$� �`U�]$�[���������aR�#�����}Ȑ�ʕs6A*k���:��Q�ǒ���=�j���x��0��MIa���rJ�RMq���L�S@����44>4�tw83g�\�2�e`�"z���e�ԑ-�\���*�f��<�1���z����eP�Aϯ��[{9�h=�V+�Q�7�����`�zD?���T�z���q̑�]��릻Ċ���-�I�Iz ��v���� �)�G�s��-%I��Em67��wh፴q!^μx_m��E�UQ�j�5��CI��]��%��"�$����G�g�����M�Z�/���7����+��I��'�������}��8��j�`�[s���z ?�S6����w>�.��K8lK?#Q���^�/s�q�)��҉`ـ���>���Hb�����8P�Ùɶ7��j4�A�uz5@hp�>��ӕG���n�ˌ�|�.�5R��A�h�G��l7v��z|Uh���Au?>ą}l����W�jU�����EKI}7�d���{) �Z;�5��u{iTP�m<�/�3����;���t�!ҥFE��D����&*Xd8�wi|����}R�z`�1ͫ���e³ޣ�8���'�?`�s��=#�״�s-�����z�����RU|�n�!��|�b_� Y�~��ԘN�M]��&�����H{%�"�����|웄�� ���M��4�w�@���H�6���89Kc^Y�������y�J�� Iꥥ %B�F�"z�89�"�60zNe���T�V*קǸy��������pY]D ��*bԺ8�L�"^����2sVǂ���"[M�� #�#�N�}�[��x.LJX�Im(�ތ���h|-��*��J��G�e#AOm&8צ��c,Ѳ�Z'o��!o��\0/4������/v[yZ{3�R;���}|�*�V �uRj<)�i6���ܳ���pv�����_�N��I�tj�=>���uG�&���2�����c���������)���Z�M��@"�`�H{߈ �R6�M�c��đZ���ˤ��R�$�m��� ��|ա���>u�����YU�%�D�D@F4�Zgn I�����1�d"Y|��QpZvB?ud?k-�h&�����L�JV(B_c0���on��(���Ƀx��S�� gPz�O�΅����w7B���8�D���{u�, ��1���sg�����V�r���rّ�s.�cGo��AbK���`L ��O��d H���ݩ;��!��^H��J'u�<c�^�^� !�Z�rQ�0��d�< �:�edj�ϡxg�aq)�H�����K]e-I��<�<�u-*�~]ɩk�M����O�jxx����A�J��&��rR�Gg�'��e�ZJ$�I�%z�.�H�v�(�^�/�I���X�k����[ҟ�h���Ȱm ���̵Sj�Pvö�����S�l�x�F
Static task
static1
Behavioral task
behavioral1
Sample
f6bd9644cb568ce7f7ca4bf2dacf352472b36d656735c1eafe97191a5dac6c7c.exe
Resource
win7-20240705-en
General
-
Target
f6bd9644cb568ce7f7ca4bf2dacf352472b36d656735c1eafe97191a5dac6c7c.exe
-
Size
2.4MB
-
MD5
b4ebeb2d1f4ae644c919c3a70b120b83
-
SHA1
a5cce77670e8bd84b6114f91bf775b85e25458b7
-
SHA256
f6bd9644cb568ce7f7ca4bf2dacf352472b36d656735c1eafe97191a5dac6c7c
-
SHA512
029efcf89ae423379f10d2999a8861f439ea7fc492c2b359b6740e771b8ad95518b5cc49c53d6d3b9967e0b138d2adc65ef0227856d1b426e9e780ec0bc321ff
-
SSDEEP
49152:E/hNaq2x2J/njZ3JASz9STJ3bzz3rm475Knz0SprP8P3O/HAYqgNZb2:UhEXIzASz093fz38z0WIP3aLhL2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6bd9644cb568ce7f7ca4bf2dacf352472b36d656735c1eafe97191a5dac6c7c.exe
Files
-
f6bd9644cb568ce7f7ca4bf2dacf352472b36d656735c1eafe97191a5dac6c7c.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE