t^G���ݍ�Ӫb/� %O���PŤac��{��ԙ��4���^H��� [z?������"�:�r���%� ��bM��H��e�>3}P�We1�LSApm���D�Љ�V�����W ���}hm�!�vG�R�0^��y�]��a�#��V�g��o����Ξ00��I'5����Xk�~ם�.%D���c�Y9s�ՓbW�A��6;��c 6��}A��!�US�{g�>�s�G7�I�A�GV|��f����:��G�(�j#�/��HY��y��}��R�>��=B��O2�D0��1RL����"p��GgQ<��ʽ�Jt�_0�������`��2�T� �VL�� �:���s�[��^�)D\1�@Յ��c��b`c�?ܰ��sQ���+r�)W�����w�yPL-��S��� ����}���ӷ/#���v���=$3��hol�+�`�F-QE�mh @�'�7�X���i���}�+|פx��=��$ ��;���g��]��:d�z�CS 䍼Pl|�Ӵ��v�k�4*�|�k18�h�X�cr�XA��>�*B��� 1��M����t}�V�I�CP���x� !y?�j9��G��W�x ��^�|� �m���Ʃ_g�S+U������`�:��ߏ8)QT&jg�k����&KtjXrH��T��s]_��Ԥ������X�\�ԑk%${�zo�6"к���KH��Hѓ�_yֿu�ӣ���yJ��`�>�y7 �l*(Bg��Zݘ:�_��&�y8�����8i'�Rp}R���(֢}8�(�ȣ���~>����)Lf�I��� /��Xi�f�BV�#ūG�t$߳H�F����73��P�0��x�V3u�M�k�2ձpS�T��N�[�!���2���M��6�����i ���R�n̙顺`/���8�#�"�h7�q#^��WL��U����V� ]���"����s;����C����&2 P�'p�ߟ���#�O�e�����1������h���'A���Xp�zFj���ª��L�!�`#f��aef줿k��_�����9�/�L$7�2����༃G e�ӡ����>N��6B��3�\�od��@���f��l��z7��vf}rg�6T�6���+���6���x��8�)Yq����^Fu����?��%w� �����a]Q�Bj��̊ǘZ_(�{%��7�Ie�℄MQ"m�O�Q�0D�!f�!�����^�y�]'6 �ζ�g�P��L��p�*n/O�wF� 2)�T��!��@��|;�|A�k��-��1fI�Z�b�P8�y�U��A-������]F�!ɂx�F 粼��E�_���V�"D�Մ��%���I����S�ɐ�JSҟp]��k���!0�Q�?a��;��K�Q������̢���#��>��,��`�j��A��ϟ�T���4���)�I�'A16�ODe�{J���b��Y������k��yz�� oB���E��E6�L�҉�09��q��V�T#AU��*�VsQ��f�)5F(�^E�l8����n���`�$�l��~�@��XM'o���3U���G�]�526'_��+i���@M�b�F~ �o�b���n����r�����2��8��.v#>�)���0���U���[Ւ�3�O2T����*]���G^r{��@n�FP�n8���+:���]���[�ڒAZ�^V4���x.��P����?<���b�^�̣�'�C.RR>�B���^�<ԕ�}����Lz��2/�_�a���&�O{m��1J5����w�1��C��1(2�9���Nbe�ɓϢGZ\ 즊 L7��!r�Ò��L��( ��љ�/ɺ�e����cd�ʿ|�` �{���E=�$�o8���k����P����]��4����<�6Ϟ0�|j����O�"�2ZK�AL?d�֓�MD�n��!��p��i��D�5�'ݔ���K2�2o�'JMv�{q�$�)��od�` �DX���i�9NY Ӝ�zEY%7@�Q�uNB�����)%r\����Y����m)7 ���5�#��!xW>L��w!$����ɜy�����C�"��S�}��C�i��r�ʐ�_H���N]O7���Uʹ6p$�բ3�5]6^���qn���>�9c`��R az�Ԉ����A��t��N��*�j�1����ƚ��϶�ɝ�(�h���l�`�.��X�Qm�!LO6�������A��x�ʙ���>J�u� ]����9�z>��V�]���X)[D��.�4�h H�5@5�����9�|�y-��ޑ`+M̚�x�j��Kdc�~6��ܱ���q���,�$`�/�r��@0�1�Y��3��.ߒ����-m&����ǔb~� ��uO_�?�B�l�#�<�w�az*�d4e|c�}(b���W���-@����Z���Cc'�! �����Y�ǫy������ݤ�r�{��ϰ��:�F���ʹ�?]oF9)ZȘZ��N�#�%H"=�$?�v:U��bM>�p���ͨ��| Q�5\UPx���E8_K��k�.0Ө胫 d$7�N���1��������k'M����@ ����"�OG�jF�X�)��n�cA'��֬�u��A�Mn�穭�Rm,��ξ��B݊c=Oo���q��N k ߠHSVE���$=|P�`O��%f\a�n|�0j�� ̥Ji08�)�v Uߚ7�l4}�a�� .�_3�,�P��8y��llb��^\����'ʦ��ܶ�|���ߣ^>�ڢ�g�|��tLZ�-Xm;���tQ$�Un�lI ��2�����^X�����#�w��K>��+�V�8���>Ϭ'���}c�� � �sN���A�[' S��D��LQ�<�_>CA��2827:d����sE%6!P��і�[�T����߰#��"V����������1e��pf�����5��HWz�,�5��ԳT�0+a2Ȣr��pb�:}+:q'�,zy��&p��T&P����:�A��2�p?�6�����l�?�%ڧf�<���c\x�:T��:�{����cQ���[p
Static task
static1
Behavioral task
behavioral1
Sample
b73f7d7c49a6e06136815f0bc29d3e40bf2ab90c41f053799b23da09803bd9f4.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b73f7d7c49a6e06136815f0bc29d3e40bf2ab90c41f053799b23da09803bd9f4.exe
Resource
win10v2004-20240802-en
General
-
Target
b73f7d7c49a6e06136815f0bc29d3e40bf2ab90c41f053799b23da09803bd9f4
-
Size
4.5MB
-
MD5
06570fde6de9c2977f67d82e5dd15477
-
SHA1
b2ba5c33005d6582e42e34bddfef5b48541821c0
-
SHA256
b73f7d7c49a6e06136815f0bc29d3e40bf2ab90c41f053799b23da09803bd9f4
-
SHA512
8b8bc03e29528667ec60d934e73f43593c7c1021200552839988a8e68fa244ea8cc6a6bd9355d052749213d9a3c6883b9dec3d51cd20e0715e09b54500a5e2ea
-
SSDEEP
98304:jLd3Tu/sUo8z12yfU6gzC36hR/ZSOLafg:jBq/sUo8z19fU6GC367
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b73f7d7c49a6e06136815f0bc29d3e40bf2ab90c41f053799b23da09803bd9f4
Files
-
b73f7d7c49a6e06136815f0bc29d3e40bf2ab90c41f053799b23da09803bd9f4.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 520KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 393KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 297KB - Virtual size: 13.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE