�hn(�J�W6]�R����b�U��L]���2��qX��9�r�8����ރ��y��w��e�{J$�<�V^�~6�����d�u6kXm�k��]�!���g^Ȫ��օ��tIR�`������n�Am%M�ʵ^�j�"5���p�:@�_��n�0�.���a��F� ��cҾ��)��l���ߪN����ʝ�d�v5�f+��&���@�>$�x���O������^ �����5���OJ�k�+�����(L���커�L�&���!�@����B�+�܅��ڙ�T�mtZ<�f�<dFpn���хIg� ���9ޥ���7�hP�C�'RyO+�R#�_����g;���6$a�ߦ"�y�{M��i��`��7B>��̖p�#���/{VD�à�?ʠ��Uv���ri� S&JhSS���U)H�"ɘ��0���Ha|�N��v�C C��m ���ҍ�`��5��9C<"�x�䂶��q����(��!!\@�Om-hk�N;�oI������4�� nj�-䘴�$�x��9E�-��.w$�|���R�aM�u���ޙ<�T65�,�Υ������i1툸��q�'@"[�O[&�ڹd��ܚ�z�P�"����_�l������)!���͜���S�������apI��L�'8���gD:��g�i�K���zTgr*2���_��[���plo���� �nλ��4�}8���.�m�� 7�b ������:��6Z�5���/�U��Q���"Mƺ0��<��+h/3�3����m�I��CԌ��b��|,i�������P-4Iw�ɗ� ��&�L�,���+��~][$��A�P���J���}�X:�W����/ ��7\�^�(#��j�/l�jn�Nȿ?Կ=�3>�~}$��Ђj��X�������'"�zq�mC�i�B���7�iIԘگ���ZfX> &���WXQ���i>Wx >��S��yG�L��;�uNK˜��⿴��ݸ����T����i�ON>�G�0��):������!T�Qc���]���z�7 Ί�-��]$�+�Wi���$�g�-�+wn^+Zo`N\�o#�wxU�vf)O@v�(e�&�Np߶|�>�4�2L�OK1�"��@�� �:�&�;�D�,r*N ��k�����6�9�:��dR**���OЧ�I���@��D�=��@H����o�Q�#�������&F52�����:'p�6_���V����OP�I��Ԟ��x��ZN]2�yF��x�&�¨��QY~�T�6 Ţ3v��vL�]���z��ׁM����ذ��ĕt⪪�\��a�I����l�Q�B��lJB#P;#�]9����.܉n��qq2O���Ƿy����qI���iG^��/O��7�%Ts��$��P8R(����5t��ԇ�T��J�����3�&z�����@2�AP�8�C�ZBJ��e��'$���#cQ�Ot� �zy�7�9�֔�2�AR�V?���� ��>��7���rl+���~�g �v+|��l_�4��B;a�>�.E��ţ^�����_���7�������g��L�7�5����j��<�t�T!K�-�xiv#$���)P��G_��nv�� [Y�P~=,��;+�`��x� �T���|�� �\���BX���jG;p*�m݅$f$�a=(.1����W�?�Fa��l���Ё��G���S��C�b=��< �H����jT�ޮ�*B�Syvq������,���f%�����f�$�XGw����t_��4r=:�?8��}��ZN3�<Rx���L}oIF4S����g�oh�7�����m#�Tߝ�������@�*hc��|����K+a���#K2�w\��t��>&�;R8�Y)�4��h�ӽ<�|�&�v..�l�����hSc���|N���L�^�\�p��E�ѧm�ˇf��%4�'���=P������A�/g~Nd�3X��L[��Ok�kʵ}��8AQ����H�p��ݿŏ�S?T���*C�ZD���|GO=�^*MfN �iS'�c�i���Ng���'%��0m��U�OE�t�@ ?�(�� :d��?d5̷������lQ}�vk;��h�[U;���^ڔMA��GְHL�k�y�w��ϷS�x�o�6���hg'AM\{[�F#$r|���_6��e���9��H*���Ek�ACÿiNKLv���8s��4B�t$uW���2@I�y�N��¯A����>���'|֥����5�3U��VC#({�P�'z�݁Mz{OB�L�\gy���p����Խ&��5�t!���$U� 1K^!t��\R&�#����#;6�ߋEW���� /���d���4e�d5� w�fۛƧܼx�,[�����ytL(>�>(���(l��&O��j_���$o��x%�OtT��$�&2%s���Y���skؔ�Sx-yW�&�H_ꮅ�����f�#)�9�#?~v��צ>m�$���p�m߹�����3�1�,gz�B�g�R�ta��\Y��LX�˷�軅fo�Êa%[��'M�.��X���8[ބ� s����L"�����bڧ��`N3.����;��i6"X��I������Y,#�?�{�������������� �����5��@li�[iYЦ]X8�`� 6����N����?�2���Έ�Y�(Z���ذ)L�+�x���f�O? Gԟ�-�b����ƙV]�� M&���� 8{����˾���3���>Q�ǧ��f�R�D.3S� o��Ç_�F�d�5У�'������`��h�DԾ���N�̞�PӺ�5���ZI0��ծ�J���\2�%�ݙW�Y�L~_ >���w�3����̶F��t�����0^ ����C ?1�E�Mހ^4���H�Gj��U��}*�%��`Wk� Ȥ��A(���th"[�<��p%�0}}7q���X"��q�8��gW��8��ं���/</���N��3����V_4o������"~��k�1��Ka��·b` VxBE��=@#U~x�#
Static task
static1
Behavioral task
behavioral1
Sample
8567c63b3bd201bc20c3f4aaa36e0246f8ea5fa3d9027c9d09e9dabed569f601.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8567c63b3bd201bc20c3f4aaa36e0246f8ea5fa3d9027c9d09e9dabed569f601.exe
Resource
win10v2004-20240802-en
General
-
Target
8567c63b3bd201bc20c3f4aaa36e0246f8ea5fa3d9027c9d09e9dabed569f601
-
Size
3.7MB
-
MD5
6eb8503a70353b18b6faa0a935ff7d53
-
SHA1
99bbd2da46a6476dadcb98fd659b039281b07cef
-
SHA256
8567c63b3bd201bc20c3f4aaa36e0246f8ea5fa3d9027c9d09e9dabed569f601
-
SHA512
ff9240f76dcc28fe04a9d82962200c4f402b8405f95e374bdfbfc19baa111c7e6363072597a79c52ec7c5c8290db272203881e3b3c2e010ba30024d27d611d05
-
SSDEEP
98304:CvukggYdQUL2aNx0jkw7bpa9x5lil8gtjuQs8U4j59Pb:CvOgY+mBQ7b6DlCtjJsE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8567c63b3bd201bc20c3f4aaa36e0246f8ea5fa3d9027c9d09e9dabed569f601
Files
-
8567c63b3bd201bc20c3f4aaa36e0246f8ea5fa3d9027c9d09e9dabed569f601.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.1MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 162KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 180KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.redeyes Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE