G�AD� qa9'U�*G6/t�ZHڲ���P4��룡�D�0'��(��z�~�ڢ�=���������(�J՝;����+�� �4V_k8�gz-����Ʈ��3z��� �,P�"3 y�^���'�,�O_0}W�ݧ�g,p:'�km��}���Yӻ����!��b6>�9=�+����0�()� s�p��~&$�:�HU��sU[Ԑ�5�c��ޝ���2殺f؆v'���눭�e$(�g���$~>�x�-�� �M$�����g�b����g�x�q���q�D��*M�?�'i/�����&�q|{q�S��9��9��5 ˨ �L����T�o��o!H<�V/��Ҳ�_A����_Ӫ(� b���[[�8A2<Os�>p�&=߄�ɲ��5r@m��:�$��Ȋy,���G�3��z?8�Ҫ=�+|���w6�� ՞i�,�5��e<;S���ǚ��g�\D.?���-'㣾R�}f����Z+�at�!=4n�y�86�:ph���ȳӐ����R}*v����,p%������&ߖ+�|���9~�z�p�>��]"�t(��b '�0U͘ۄ���E��DC/��g��SЕ��`�W�ry��3$K��%gִA2�릺�hI>�8���HcE�C��\�wX9�dm����LI};�y훜�6�1�� ʀ1 2��^�g�B ��즏/���f� O.�H�,J�z�ٴ�`S�H��*�y�%YW��k�Jf� ����W1 �c�﮷�|1����-��X�O�����-�1�Y�ǧ�+�"zg3)$:�H���=�&(�J)�Ļ���ܚ ����,��z�`Fc�%�0p�:B��a1���������� ���D=��T�]hWb�{!N�Y����fŸ���o:U����q�V��%�l��U$ YA��n*J>��ͭi�7p&L]�UR��Ri ��@�C�1)© �o3w����o�}�Q�5�ǂN�5��KK�k���ru�r�wS�Dn�d/� �P��+6��x[�@�wqb��� j"�j�&��f��9���aCZ�B;Z6��� p�b�I���� ��l#(���>�߁G�<��P(<dY�x��:P�>��9M�.��;vN��kvc�+���bO+p@�̙��!������� �ל�Ǡ���ɷ�6�v�BuU��d��I�drH%�LB��B��b9���g��s���5�%��3���6�� ��l�VE���҄܇�:�P�� �O�Pt�+����c��4�������h[;��C�d�P�v#�@�����hu�=?)Ço��\�II��k^9=�����|j̫� �!:{�SN1��@���nK���x�A�$��2��V�o04��+v���[^��oprw��s����8�]�.�H�����"i2I�P�W��N����M���QeO �w$���F8�T�3���:��x~������\9�٣}�f��$J��(-Ĵ^�Leu��84�h:_�k�K(y��4C��gNQP���3[}�����OcJ�o�g8"Ri�'�L69ė{���U� �e�{�;�k�Ί&lQ���{��4�\̪����Rd��s��!�����@h��?�i���o˶��ZA�8����A������~l�pu9�_�ōU�ؕ�Oqk!'�@�h#��U�Y� \!����c�*�]L=����x/����(r����o�Y�sp��^߭�ϘpVd7N�9�#��.�*.}��/Ќk����G��=�qw��Hٱ�Hr����\b�D�l^a��$�����E �]J�j���A��1������X%M�,�h4��>r��6�e�u��n]��ݿ]1q����T��x�<X���ImN_HI��R]����SG��b��W������λ��kGe��A=���.��Ν���6/{�!i@^�~$���|�����-���}� �����]�Gib)�Chb�q�jM�&oI�g子c�������A*p��)��.���hc���pG��@A]�zW�V$��$8r p̱h� �>���*�7=S�\u�[�vq�cM7�CQ!�Z��p:�#o[lV��yl �t� �bd��|Uq���ĴB�D�(31��_����b�i��'��ΐ�������I�۔D�#�Xi�&���A������[r�U�g�� �] �cy�������t���"!/���w���7�z�j���pK���#���=*��.����Ҭݳy z͖�3�:|��Z��A�?WA��O� x�K��P�H�%E�����:5��&�F}�;�6�4�����g�ʹ���I�G3�A��D���4���'gc:wO���+���7 5`Y6j��T�[7ˮn�{��QBs @L�����m�c������\8�|3����J=�f Q!���f�^�������̵�b�D�v�:��g�@�vN0�r�79����Y�k��n��e�Z�L����3��ʥ�铋�<I�U��{��@��|?��;�Y>��i_;��3 \�?���T�_w/����W8��x��툧�]ʅ������ �G����u!�uI#��lE>4[DL%���>T�����s96L��_�NZ��%v�,�ם�x�ܠuc4�҃�����y����-+�Y`�@=���@V���D�Y��\0�5����;lj��x��|6�_>�> [�O<I���L�E�ȸ�9&�3�D���O�z��&ǝn��{���98��6��k���^�{z��/���9�G�n*"�kS��,3&�:rɂ��w U7P�_|M#ʘ��K��5�K�"hV��(���et� r�_�H2�:i5�b[%P��d<�_�d�� ��Ȏ�\�?/�%=���7�E���d�*��F�Q������1B,���l�I��<^��eZM���;��k�&:��h5t�E�1�{�}PfmtnV��P�����u�Tt��(?��)kt�j]�����1�NnB��/�?��Ů�ɽ<�}���|.�s�#�x�u������ň�M�#�x!�v2�����OB�D���L��t#����� Q⫹֊�-q>c��[�7�jnB��.����{��=!���;$���Ǯ,:�|q�r�5Bd���ܽ?�F,�S274�{��ZOIKЂAy��ޜ��3��ƏS���}ӄ8i_D��xi���f��L?�M����Gz���>bp>-��?c��OT�Bv1�F�߷�Y�2cm:c�U��Q���i��
Static task
static1
Behavioral task
behavioral1
Sample
c6ac7f49caefba145a20281ddd359bcb645a95a4328e1dedb63548edbcb9227a.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
c6ac7f49caefba145a20281ddd359bcb645a95a4328e1dedb63548edbcb9227a.exe
Resource
win11-20240802-en
General
-
Target
c6ac7f49caefba145a20281ddd359bcb645a95a4328e1dedb63548edbcb9227a
-
Size
3.1MB
-
MD5
8fafe7f30697a37760bd5e7c8af6cc04
-
SHA1
d2e6ea8811b095f84f837bc819f6138507ad4070
-
SHA256
c6ac7f49caefba145a20281ddd359bcb645a95a4328e1dedb63548edbcb9227a
-
SHA512
2d145a60f3d9959224d94178eb685a13cb00f815ec9ca306f231a7c740b0e73a6b965886da11c65e5c3a6b813e9a3f8da06857f857e753f43160bc0657f2afd8
-
SSDEEP
49152:V0HsYSFbiGpaf60xTLKouAq2pRLHmWuRR1fQk2kwD0w/W4W:VNlex605vq2PzzMXrrSW4W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6ac7f49caefba145a20281ddd359bcb645a95a4328e1dedb63548edbcb9227a
Files
-
c6ac7f49caefba145a20281ddd359bcb645a95a4328e1dedb63548edbcb9227a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE