���f>�@Fs�9�9^$m:`��B��j��u4<��\V�V/�6<3��cu�B��P!���y�;ʗ�橆��d��s�W/�;6�����2XΏ,�����a��;B��P����[�R~�f3*�A��� �KYR�ؠ��iёG����KΕd~�m��(+�i����0�����L��A���=&�R���ok����45�Z.4�T�'%~�P�� Gg��V�}�2s=��Ƃ��Z��H 塥z�o���[XjW+�*E�1[o&Է͜%J icl�U�ޮްMtBJ��K���o��UZ�+Leì/�<�6�4TՓ^��U���((QV��N� l��.��v>@�=��ڒ�|fމ��l��О��ԕ&���(}�b��g���$k�c����$Ez��������-���>(+��Ǿ�k�v�/m�a^�X7���0�QCu�����Z��x��<�(Vf�����<H�s�n��������e��]/���m�a�4E���e�B}�Y͋^0��،&��I�*t&�#��~��F�x��~���L+/3���[>�0G����V�w��\���Q-�+�1f=�� ����4))��g�����s{S�aƤ���e- Ø�� V=iS���a���a v�|7v������ٸYXm^O@�-N3�%/�ә��k�TId�j+��� ��cv��O�7�l/����r�|��� WJ$���0�~VO��κ���ԮP�����K� F?a�v51�Y�Z����.�3�_S3l]��ҏg�$�P�O�z���s��"F�N:�H(\���$�bt����AB&c��z���$ 2�P�dd烚:��5�6,���]��������0C�}&�b�N�n�:H�:���H�����k^���0h��1$Y)�u��29�Z���-o��\,)��t�6�C����R�G���_�@е��St'�����-���V��@�]</���T���`er{%�S�Ѻ�"�V�K��5��6�. "�����4���7�tk��"�'Q�߃��^Kx�>�jg�؈��]��@c@�*o���h�AnA<�"�$,��{#��"Tst;�3��Ll�d����&�=I[�� (ǖ�@|Θ�W<�T�u��\ dT������K�,����2���A��O�S�?�s����Q�`f���7S�yh�9�=�9�d`�rұ�'�y���%�^�hl�c� f�N�@�4�Oo��G���+w�|�<�5��! ��h���Y� ����ˮO��I>�wx���N����˙���@zJ�m�\�/���ͳn�+��}oϓ�հ��ܕ����Iۏ���_�t����q�>���� s ��]P8���EHR�ί��20���;mC��e�����:lO�4�?ڂ���6���}N�5J{2���9���0/�!0 �_:�%���/d,Gಉ�n��z�� /�{#�Pd�/���mc�O�2�!�]�h}�"�6�p�t\��NR����m�k(��U �� Ȭ��j)E/��"��ȽEA�\������2���aX�f����Y*�G� ��T)?��讃�w'�����A�i�ހ�u� ��H���n�*fp���8�+���x��qD�s����ɨHa!M2[��__K:/HYCQD'��E������{f�gk�oE��IL��\���r���ﶩ©]�-GZNZ�����-d�bP�*���4g?{�V���z�OǣaH�:1������~-��\� &��ER0 ���u��R����Υ7���@q��'�a�k�Z�9n���^f��|�l\�w+ٷG&��s\e4��c��LJ@�m�Ϳ@��Ys�X���f�������O9R�n�BI+`���IC��˷n��jU�g��.v����2TfC����n�������Q R���G6���=��l�d���6�ΟC���# ߰4I��B�_;1b0�"�� ;�&��Dq��I�n��Ԉ������Z�8�;�ϔB9�s\�����={=`fO���˖��7�D�1d�0�6wy�Z�v�h��w����Ӧ�tE<~o�� �-�_K�����Ŵm͎�O�������ή�:&�۽&�1�?�8%�ץ�e�Bn&�����R9�4�yI.��@)�K��I�$��ic���NH�V���W��!���U��F��:( N#�jw�R�Q k%������v�B=%�_.G��w���6?���lm1(E~�2�����9{J^9x�Z��Da�~ŨlG��-��]x �nU��Ȳ�t���ȋO�̷z*cf�@�=g��������XN�\HU���C�S9�wOЬ�:���߄%��P.[�3b�-yB�G)1�96+MD�yDϗ����� �����B1�����C-+��5.�a��<3���q<�/owd���j:��ˬQ� D ����):�9������g��M�~�1�g5�wʾ-O�aܩ:2�a�Δ[�?T����(cT�CJ���*1B�Kb�X����� z:M��7����?�� Gm��H����P� :C�/gKˀ�����ٰ�t�� ��%�w��4����10*�7n5����tI��m4� ]<%^�:�[�kж̔p��f��jѭ Я�Na��L�b������؊���i� �Mi��!��OH��!��M(!��c�ӧCۼ�O�#5��c�s�FLzY�J�Gg�*W��2��5����ZiʑMoc�a���ҳ��u��Tlf)t/%�1�LeY��C���F�ԥ�E ��m���rqC����<��k���d\���nZ�~��ҹC�bǛ���@������K���*��^DM����o�Bș��9�NjA�l���B��X�$�9{������䩯��뺣5����-V@�=q\�5Z9K�@'�� W�@�z7X�$74��Hɣ2�sS�g����J����C4P��B9��xmٺܐ��G�j�ßc����9ڽ���R[�*�b�Qst)�"�JZ�����;�h6��"�����w��x�%qqG+f���[\ċ{5�)��TU:���#%�6�j)]�7���8�C�p����H "�ykqf��"����ۣ�7?��_m�X�)H�ֈ]2�{�����~#���Tr�CH�V���ל}��?���5J����٭+�i*'m�,��s����zT ��`��ޝRϊ~MP4�Z���ͷ��xH�!zY`�xM�o�9ߐ��>(��سܦ}�i�_�$@ �IP�m^���qةi�'��ޒs9I��f#�pa�J��~��E!���:��iC�[�}���b�E��(,��K��[bgW�!DM|7�?�-���LKsώPښJ��gټ�W�^s�IqOh�~eGK�����-������1��;2;�B�����V_�$l��N�!��]�G?77���PX�h0���W��E�:H��/�i��B�y��`�%p�Ih�e�a�������o�s<
Static task
static1
Behavioral task
behavioral1
Sample
6248b62fab30a2202fade2332866e7e76ddd934f42770ebefa8b55a9c3f4fd2a.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
6248b62fab30a2202fade2332866e7e76ddd934f42770ebefa8b55a9c3f4fd2a.exe
Resource
win11-20240802-en
General
-
Target
6248b62fab30a2202fade2332866e7e76ddd934f42770ebefa8b55a9c3f4fd2a
-
Size
3.1MB
-
MD5
4b6420bc75ef8f93c8835b65c985419a
-
SHA1
42de10fa325719f062492455cbc5c1f921ec9ba6
-
SHA256
6248b62fab30a2202fade2332866e7e76ddd934f42770ebefa8b55a9c3f4fd2a
-
SHA512
5e4031af5ec04350fa9fb500eb70d19ba36c3d472238eb59ea86bce3af45f630f606f7783e7be57b8ccbff4effc45a0d5de0bcad74ff4464b117ff392ede6d70
-
SSDEEP
49152:KW3+usinWpCEKIbOsHO7xrGUBcNQzhnjBUyM4quaBy6zCDF9M17qjIJO:LzsiFIK5cIcNGNUT4qua46W2179
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6248b62fab30a2202fade2332866e7e76ddd934f42770ebefa8b55a9c3f4fd2a
Files
-
6248b62fab30a2202fade2332866e7e76ddd934f42770ebefa8b55a9c3f4fd2a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE