S� J�MCF���f~gۇYŋjbu�c�r�<< ('�_���D��RG���b3�b�Ud�]���m�@�sK�/+9Ea�1���f�G�Drp ��{ĵڼ/�?�}L�w��W�|�G�6�U�w\!�6����6�(��>��#W��_����AY%\k�p�Ap����U�]�P�ƭ��l����h�2N���"߽� �n騅�y㈗ʵy+*���ҷ8�6����Մ��;�����qO;|�7�wӻz�� �D�+"��8C3���h�� |�fc�O�P�1~�GB l�C��A(��DN"��4jd��ls��nxI����k|�Jt�%:pC������$�E9|5�q`��t�b���;'�p�CO�`h3M�wY���ɕ<�������:�!y���KE�&�6�0.O�W�mZ? �L��.v�W4��"PM�͗�8��6�n�*�ć�U(����'Rl�iQ�YR:��{H��tW�O�'9��d������]u4)� �9�������.��AN�7����Ykm�@U����\�%��i��|�3��R!��B��U�ٔUl ����+�v(�������T��j���`0�c�_\��q���� �F��M}�g�D9/BJN�~8�0�V�ח`�:� k�Ņ�MP�< vtw?5BC�ķ��b����n����lv�T�[�R�$��� �ί�2�~�g��߁]#t�I,�[�k��<��g]��yv[����O�+O��[ B�N�� ]�]U�U�#&3��h3��?w��5�#u��Fms�<Y�����D�&;���t�"��$O�#vi�����^=3�]���S@X�j�$s��nx�ܘ�A�����Y%�;tQy)��_r���1�:���qGuL��)7ho�-�O�u����,��Ry8�s� _}�� ��L�x�&��I� ��m���Iby�~X7[��� �?�艇i��bΝ&0%>z���m�6����-X>�b���&,���l��E��3�v]X���z\e������^2 h����zZ �e\�V �0Sn�o$t�C�"�L�sR�����D�b����[�;���qT�W�d��% �̬�"7�!� ��J}�D���3S B��DS���aȚI;�T�p�B�A��|}UmB�j�rD:�z��CM�6d�[� �qyD�M,70��tP�JK@:慒�h�M�6��"Zn?�6����/i�C����s)�&� 6���TC�M��\¤��CW\�=�S�7��Z��P'��+��o-L=҂����n7 �{�hI��U�A�HNx��& ٖ�gQ��y��p�-��8��p�Mh�����>������D���~G֩f�[N�7c��q�H8��_�T�"�h)���M&�ҧ�1/�~��,R��Fk���a�%߾�Mx���ynjU QWu��W=�q�z�Fő� ��CA��w1K��1/Bʂ͛0�:�R��tbx}��r0�v#������[�B��>ҹ��*>� 5��z!�.�����.��܆ ����0Me��t�چU�# D���\�{��Q �����Gw|fEu�;+S'��a�[���"G_S�D��p��2���~J���S��\�'��Z��@j9(0�Äg*��� �e>��R�(,G�sn ���K�Z!���9�0& �d]z .��u-���w�_Dž�����a����x@5��#��U �^˘�����K� &H���V�n<K� �� =��=�ݢd�1ڂ��M����43�ڙ��%����r��� ��b�"�skz�GT�Iob�>35�H�Br��/�Җڹ�Bd��-Sսu�T��m���S'8��5T�0OJᵛ ��+����)�?����U[���f'jj'q��˽5�B�)o�X�n���u�Sp�]��DB��\���R�_�VxE8x4���om�N���Y�CJ��F�:#�1yNO������ܔ��ܺ�#�To�|)��bA"��oސغë����2���H�S�ox GI@�g��������}�ڑ���$���~9�̳�F�Ϋ6��S���k�,���ַ�& ��ۻ{�1R_zM�� eG�����0^J�>�=U*j4{�d@�$�, H5�u��L������=S7�vX��D�V}�y�e%�Ÿ�!]������O)8X���ݺI/@�#����J���whe g���oj�3I�L��fq]7�?�@�m��2�y��1t�3��w�����I�ۻ�u>,����]���.�Z���-�YT��*[uX����L��[r� ZHV>��(�3�D{�م�|��..NGj�ϛ�/A�D�ګ$�P/B�������KB��.[|��t�L���:O�q����+�w�[��1�m�| 0��0���$��J���F� �r\Q���I�Ȁ�kvط�,�"��=$Z��]���VrA��k���=�s!�9����;d7��-��]����T�F�z��}�}�nA�$�6wZ��f��*\�O�[q ���ʦq�9��ZL�kBn�ֶVq ��뭧3�0E"���)��V{˛�/Ҩto(� �]����I�����K`�kĝ;�l��q�I��f���^eo�T�K!��J�^TJ`9Y�B�Q=���"�g2��=#4:�,��#*����j��xS���e��s ��he�0�꤈Z�>d*�i�S�ֳ���7��1:�2����_kP�`s��M&����[��?Ui�O2�O��<��&3l��*t�a�q��]�� �'�����g����ޣ�u����SbN���σ2:��ߥ�*���8���U���`���WĄ�}��x6g :�w�E�W�@`�%ɠ�S�V5��/T9�4s�N�d�� P�<�R��� As�Sc��M�~fo�Ć2�ݫdc�O,���� _��+�[��d���������B��m�(�`v<Q�z��T`��:��S�_o�v�R[ᦪ��U��K�J�Z��|W$Q���Ӿ������H�s,"�A'��p���=T���m,���2�z�(�gb_e�}��zp�B������jk&�`Z��Ӝ�k�c��7�i�,���LZ�'��\$�wMW^^���nR�=\��o�GU���¦ ���_�g�I�K���Z��}�&�}S�_}��ل��9�w`�XI<���M��{D����Q艄��Gp��s�[���Ϝ���2�*Sx���}�]x����rb9a �4 K����'L�%Q�:�,�nE���e �&-�jS����1*eow���Gݲ� ���F#D����}()B�Ul��@f�)iWچOE�Ǘ�)���(��s�;���Y;ʩ@""�K���&A�U\�0e����;��7_�gZ+b��Rn�c�-����\�NZ�Zi���kJ�^욗�ѽ2��w�샾�w�_o��qFd�35xmZ��>�[�lu���QI�~v^��o魥.YB�s������E�봡� ��(���~�<oB�������J�ȭӍ]� ���z@1-�?���֡ĸ�d��.g�G<�u�f�,��Wz�z͊_2�Xn���5�����D�) )j�0�����0-�p��w��$��5(2~���S����7Q? 0?n@����kp�a��Ym��S��v����m$*^t9|�[C� 3��;#�:�i��i@uD�Z�`��?#X��6�h}J�m����L��E�1�j�1rF"�����m5 ��}�+��c�M�5Lo܋��1�!�v1D*�\��"t�B�1�J�sː!��+e; �]�u~(fխ�ݑ+�K�Zw͝y��YxX�!
Static task
static1
Behavioral task
behavioral1
Sample
b62680b8768ca5a64eabdcfdb1c6000db2a79fc98ca6f95c669c31fa3a6fb331.exe
Resource
win10v2004-20240802-en
General
-
Target
b62680b8768ca5a64eabdcfdb1c6000db2a79fc98ca6f95c669c31fa3a6fb331
-
Size
2.4MB
-
MD5
b9e1b2e0323465df8cadc0bf505b2e78
-
SHA1
66173d349adc5e461e52e03993a240596a0b89d9
-
SHA256
b62680b8768ca5a64eabdcfdb1c6000db2a79fc98ca6f95c669c31fa3a6fb331
-
SHA512
5e67ffb7ffe102898f313bde9c9cfe4e5087a9a2cbafbbe109b8a84ccbfccbd997019cad1523bb2ef07cd8f0eb962a14c80c611b517af087235918e1e29df629
-
SSDEEP
49152:l2lxRQ63bdjt5/SJ2tFgUl+oYBpacDF1zchY2mSJ+OQY+vtpK:l2l7jvSmFsPBUE1zcO92+OQY+vT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b62680b8768ca5a64eabdcfdb1c6000db2a79fc98ca6f95c669c31fa3a6fb331
Files
-
b62680b8768ca5a64eabdcfdb1c6000db2a79fc98ca6f95c669c31fa3a6fb331.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE