1Wy��!F%6'�7Cg�����jX^� �<z&�Ye�هD1��+`a�GZk���d=u ��c�A}� �ij!G��7���zr�PSi+Ōt `V"�u� ��٥Ҥq'Φ������Y�B�K�zA������~g�с�s&?�^���TO�@":��P*9��f �v����$?��=�J�ȯ��'����z�0��j��:T9����I@����^b��Vx"ōF0*�)N������>0g?�(Y�3�=g(�`9}��I>��]���܋#��2���V'Q���X7��Rt+�W`l, &j(ys�#������It��'DYtK�X���X����-B�*G�<�M��*���k0Ѣќ�2�긡�Ti��-���=���-}��N� ��c�[\Ng8IwfW|��|�� 41KnV���p 0�f�ޟ[���/ɴ(�u�o���c�۔���kM�C�|D����>�#��9�[nY�|.a_��k�{q2u���_�����*�������P��Nq�F������]}�p���l�I�i����"w$?K����D��� R�\x7V$����.y>s��[�Kc~������<}� $�.g�g��A�����"�g����K�/�h�-M� Y�l��}ɟ���r�=ż`k19'V��``Q��F��..6x�w�˭�qf�K��hg�~�q�S`�r0R���`���l�K_��%�~Jc�Ɯ��a(��h�L�lT3eT�]���%�Y��V�2dۡ�k����?0W*fj�ty��q&�L�ӞV���&���ݳ��lZ�ɬ"˟�X��4�)�`W��7.�Ԫp�}6��ؠ��a� �.2#�jC�A�� �����<>E,�])�U��#Khӻ#�_�J��؝��p�:<)�� GY>�� ��qh��)(c@s�X$������ϹB��U|6^�.%�ϗ0�|i�u����5��'\XL-=�@�B���I��ۨ��3KO��+�`D�Vp}�AŚ����f%��q�:�"�F��!� �DZ,٨Ì���M�N��Bٚܽ�mk|pG��YՖ���#��RSfj� �q[�������;��/k���/��K=��F��.��t����$�̔y|69(.J��F ��.�)Pchnt��Z]R�M�wY�ˬ��լ�E�'8A>t��t{�<��)+T�]��p���RP5��F6Z�ud�"Xȥ4o�ћ9��p�̃yEa���|��ZN�,���+�w;�趋�@���Ә���4l��u/$>MN�`��A�[��)��-@��b�|1�iE��Q�P�ā�,�c���|P�=H�GIT����(�6��p�_z���J�4ڃ�}����%��$���k����E��Ak��P��t,�����Y�����pr��v��}��C}y����F�֏�]Zv��!��|V��,�bI�iȯ���O�%=��|�����!P������\��Eϒ IO��4��Ǫ!��W4a�$HXq����ܫfR�ٚ�8ԡXČK(�=�X���C�j��ݖz�^�A'Ÿ���.*!������C���*�h�����%����-S����`Ά�����'z�^���������5mxVg�/��šy���~t����%�h{�ǘ�mM����kb��Д�AIERnAm�h�(+ʐ�G�I�b~��]�ى:�M���f����S2z�� #���9����BSɢ�lډeY�-õ�2c{��)hkv�{F:�p���wG�#��hTX�se�b}�u,|��>n�ji�� �`�*≆����*@�o�3�n}'��5+;�?p��� �Ϯ`�KN�/����Tz� �|)u�~�#��*��{���(�w�����S��ny�����M�KOfd�Hw!�q~ �2�����mלȎ� ���Q�l�y%���$��hX�1�^ߏN�A�[|w{}~�x��!������ϭ�}4|���yt������xh��f��� ���� ���64w��&^I� "���heԟ3z�w䖌���.����㩧#xB��Z^�?�g%Js���p�J�_5e��|Ԍe~c����p�h�=������7���J.�x�W�2H=8Y?'y?kٍ�=����a�z4 t����ȱ3�c�\H�ǔa��9��߬C?ZX��[<0m�.�I��q�:�SeK�u_���GBb��b}_�[$\\^U$����6!K�J������<E�7-��7�dT,zyMMz��~X��b�eo~��h��:���߅�^Km+��k�Š,[� �HZ�V)�C4�ȵ�%K�����H������{��}�^2n�(�Y���ধ� 7{ױ�������=u�\�́���93�����&���������6Icشdl\��odɞ���IM�\�~���AԼ��� �p��.0��,�B$I��Q���N�$���t�`N����F'��ҁ|x���>�:=��(�[�ګw��ڨS�=� �5;��"Q����b�`%�`�Cg��UJ7��%)0���}���T��T���c�C������];�D�3J�����1O�K$v���X=�b6H�7��J�ϥA:�|�R�K�8}��_r�2܌ '��2�� �i��[�����Zn���b\XF�hq������Gn��!v�+F��:ěd:-���e��ۀ- 94A<:�!��i:��ڷ�N��[�Qh�u��~ڞ�#D�Ӥy�+�� �Q+� f�K�T����T:E�L�*�G֘��VE����3 ��_�����a�*��Z�>T�Wᆣ�9R���y(� hUl�o����֕g�X�"_��,��f�2Bm��rԬ�m"���^e�_�y�@��� 7B�RQ��?��)�z3��ԋ��L�D#�q���g�dǯ��m�}�L�}�?�Z�I����[�k0��@;B�]V�E��/��2iG|��""N�)����t������b���1�LR{.��af�N�S��#a�pi^�] ��"_�$K�!���.��A��n�er��Qa0�5� �q�x�D��_H9������'��*���-�3:�5DUt�3��9��A����ȵS��4��y��n6S�@����9���m�x��O}Pr����%)M���K|#���ϫ?�P�A�p��:o��t ~�#����D���ag& �3:�� ��!Q��
Static task
static1
Behavioral task
behavioral1
Sample
0d2da5e6339c3ce5916b8d0aba36c9dd38b606e5e86cf201241b8375d93ce06e.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
0d2da5e6339c3ce5916b8d0aba36c9dd38b606e5e86cf201241b8375d93ce06e.exe
Resource
win10v2004-20240709-en
General
-
Target
0d2da5e6339c3ce5916b8d0aba36c9dd38b606e5e86cf201241b8375d93ce06e
-
Size
3.4MB
-
MD5
6b8b51034f6ebb6bd32be6ad1b453116
-
SHA1
c0fc7f822f7134a796c7b57f89c4106dc01eecff
-
SHA256
0d2da5e6339c3ce5916b8d0aba36c9dd38b606e5e86cf201241b8375d93ce06e
-
SHA512
2d8dfc16bfec25e80a340f9a4a19fd1edad88d90940c18e35367bc9ed780cb160a9a4b1be0e552ea0e9277717dd6ba8a23ded93488fb05673fc93e62c8892293
-
SSDEEP
98304:g1NB1JeuDIXKvfOGcrIvv9Gx0Z4SB07zoVR22:g1NLUuSK3OjGoCZbAK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d2da5e6339c3ce5916b8d0aba36c9dd38b606e5e86cf201241b8375d93ce06e
Files
-
0d2da5e6339c3ce5916b8d0aba36c9dd38b606e5e86cf201241b8375d93ce06e.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE