�W���E��U;�}����d��@fpn��;���S6��8��C�����):P�ȩ[���$��Ή�o��X�v)a��j����]*ˢ��n��4J���֎�u<t�ׁ��z��`���'E�cȶ6ѵ���JG�`���N�+�z������>�7?����p�����T���R���D7Ơmy�mc�N�)��j�j�f?�nd�K��5�7����X]@͒����ȏ[L�rK})�(����@xy�H?ҿ�X�!>#N��2N�Ku�o�R>}���F51���טV`]Q{��ą5�,�QŵO�)�����o=��'A,o�."j�g-*�%0.�C_ǫ���^\ͧIy霕}�k�� �O���� �K������#Z�+\��&�m���!G��0��C��돲���D��Y8�P�:�e��D(x$A���F!��c>q͂KS��m�?U���� ��:)X�-�����7��5�wA�%��ҦN`F)S��a��4�obs{���)�������BK��e�1>�S�7--�h�g/ۧ�%�>�C[�h�G��S�A^=G[��C�.$0ͱXKl���8���;j"��O�-��x]����H��@ Ѩ��T�qvl�U{�@� � �+ǿ��O'�_��Bsevg5=6Du���|✡��A� ��N��ܐj�[8�����r�4�!�*Σt�;��U�?t��D4Qw-�P� Z_���x���(DΈ#Gx0���삹��3�AY��mտ#Z�����n����!{0��x�?�f9OS���G�^W~�`u���o�E���Y�,���RE:�BԘݟT4#gERΊ|�B�����4�"����\&���,��B��d i��)I\U�6E���I\R ���R"R�iY��`>�҃>��S��N�\c>��̫N|̄�k�`ُ�+X?zN�~>����#�����yU�� ���� l��!:Zr���DlN�~X� �¢�گmc����3IF�@���3�ższ�wm�1�h�ۨ/dt{���0O9�#�WrG$�3���@�"��2��6��)�N*h��?�u�Ք�����c�4P������D�#�(0C��ae7Q��RQ�+��� �7G=���~2��a�[�^O)mw��0��'�h���}�Sٟ"E��Q��7`�7��I�;��CD04B1�UH� �v���� q�Hn Ȱ(<�KjZ�K��a���j�f�������L,�x�2��p����������e ;JtcBm��V�D��8�y/;��+���轡��RdƷZZ>B�6=#�C�}�wE�)�#e�������B7��F�֞�'�Tk8�����K�'���x*�}Ch���m���hI�{�*O��ƴ���%ϫ�0W���r�lXH8�:�{�0qKo��C�w��������^b�t3)g{���;!!lt>K#3��� J9/}�1�h����� ���ZU�$�ەBh!Le��W�c�nH���&՝ԐU�5�ff�-�<-(�z���Rr��?���"�M�!�%��@�#u��V�ш��͎U�R[�n�i�q�X��.���`B4h�l�Ck~~���ưU���\�_�8���el��C����8�2�X�P�cO�]�|��u9m8�,��%{R"��ek�REh����S-��r9�̗g|�j��I�OHWK�#6�'CU�S�����H�03���Dd��B�ڍ%[�HJT=����Q�")}���H�������hD9���) L�.5 �L:����mUP���\���2����"����5���v�@O�ӟ©��#��&��t6\��z�ǖ�C�B��(H���Vy���F�D�;7L�p���W�A��~&����%�N�rꇗ��'T�h� 9�=��HM�?l�eW��bx����h],�U>�E��5B8���c�(��2��=��^�����A�a���D>{�c�ݱ�)%���O�MI����.gYh=��zڨ��ߏN �툕�ϔ0_*x�k_;0�}ڕ���}�F���#�`�n�r��L��#Uupud�:A�>�y���{��:�z�� ��7x烜x�]��D�U���ے#��̰@�_�}-t��|٨��H��8���Ƚi[��M1��`���=��y���'%N�Ϭv{���g�L��'�����D%v�M�ƻ�=��C��������v�|�c��_���)�l]f��e��JQ,Uʀؕ����L}�͙�-� #G��L���9�'��A���P��]�������+�*3�I��Y�V|8yFİu�z��2��u|����o�F��/�]�Jm*k�]އt%�fe*�5�MВeqa�;mr��G�.mr�l��4���u���C}lhd�J�z��[I̟Ve'��Sy������\�"�͚=cd�W)y��q��daG�۷qN��jD�j�1��R� "~"5�G�7�J�}��f�W�^>)S�Rݕ.��&���T ��z�i�eӾ",�f�9�f �z��Tq���n�h��ٌz��<��+�Cąy�<s)��ۯǃ���'bŊv���N�oHN�c��sA0g�vߩƽ�t߳�R�ع_B=��b���}�~��p�ڟK�I}�L�\���R�����r�`�3�N�D:X�� ��m6��Z�U�G�#��{%.� �ͱ=e^�;]�~�����;ۜ�e���Ww����h�;��^�l���B�/W[NMVz��:�̺�d���� r��#���?��fF�2;�����_*��P��P��[�ĵK�/G/�E̓r�����(cG�?�IA� :ղ=�)�Ի� y�C4-����qD�Y���_������C��X��~�������[�bs~�w!gD6����P����U���q��K���CbU��c#���Q���Pnd(%�R^^+c�6�*�k�d4��� $cv�&� e�섗�@Lu����1��1��#ct܂@'0��j��K����mBS%����/��ś���&����⍾p�^!0ʋj�0����PI�#��wE��F0Sn��01��U�g��ҡ=��Q�ɧ&�D���)�U!�f�z�J4���?��u�I �i�&/����K{O�/�y����T@TD߁��HS(�>���|�>c���7�����F}�s9�N�[�u���:-��| p�u����lK��y������?R�]�=��v-ǣ �U�d��ugFi1�|�~|�V��ɥS��=�����?ꍎu_��� �1�?�l�#�el�uYDvI�\г.���M����8�s���z��.�0w~����(�҅�-��[�Y�l�^��\�sl!�\�����O���~v��9�툻�'j�**��S�|t�u.߱��.u_��B\�a����X�����*�
Static task
static1
Behavioral task
behavioral1
Sample
c6b87c90983740080068aeae24bc0ee20769666689d7bf68b45ec374149dc51e.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
c6b87c90983740080068aeae24bc0ee20769666689d7bf68b45ec374149dc51e.exe
Resource
win11-20240802-en
General
-
Target
c6b87c90983740080068aeae24bc0ee20769666689d7bf68b45ec374149dc51e
-
Size
3.1MB
-
MD5
52d84c792430f466be0e98ea58236aef
-
SHA1
e6de88c70533786cb0539c8468ea9a6535af54b4
-
SHA256
c6b87c90983740080068aeae24bc0ee20769666689d7bf68b45ec374149dc51e
-
SHA512
53d2edc92f4de539e05a67c3bc0c12028460d2a34cbc44d46db406afa804900128838fcca43e20ae32fee4205ec597af14694667fa7c0f5a0e59a7d3fc0ff006
-
SSDEEP
49152:1lqjX7AAZkDQ7onTF9/VyuS/HDTtBpOEyDjni5ef0/+fey+k3iL3sD:bqjXlkDVTF9UHDTtBpODjni2TiL3sD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6b87c90983740080068aeae24bc0ee20769666689d7bf68b45ec374149dc51e
Files
-
c6b87c90983740080068aeae24bc0ee20769666689d7bf68b45ec374149dc51e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE