I"����P0j��s)�,�Λ}��ʊ�l�g��N^^s-��B�������=�n�F�R���.܈+��v��r�/02(TTk�b�Y�5�jc\��Q�q��c)�H4z�t�b��O����3L���8���z3�2fR^ȝt��Gj']��]a",n��;0�� Y億8�ݾ�/� �$��"-W.�^Ӿ��n֩������Q���&��~7�;h]?ޝU����0�]����s�h-�̙�w\4�U��ξ�1Q�G���(r���Bf� �T��K�'��-�j\��z�x3��8�u0܊�v���Σ�����Bl�a���n�d%�������݁=��h��23o��2�����B�h��p�1�$m!����_M+���7P�=ؿ$�0mނ�[*�5x�%�-C��W����-���z(QX����HHM���L+���^G�p�B��lLؐ���lRD����g����Ȅ���R�hfl�=R�㞋�D�Al��M�JK*s䛶����!�~�����m�ͮV��ďH������Bp��/�@~�z����_����xTuy"dJ��Ǭ���� ����k er<s��w <i�O�XCW.p����>iG~x*����r�UFT(.��Ļ[�`�͕:cf��5J�gQ�a�}�TH|�������c:d���(�g��L�O�yS�.��#>����}�kӡ��yxvؔ��xB����L�c�{��-���^�*�S�TU��Z�{.z�'w@Z�9?U8i^ȅ��f���F@��.g�aI����ލ .��ڀ�����![?�瓪h���+�Y/���)��I�I8ף��f��� �Y��Q"��Zk�M~�7;�]mLܥ.P���q�����ֶ��i�ެɯ~���>(���vU0��H" a8DGU��뫴U�V3�ve�����oSա�~�-���$S��lq��A5n����H���<9���a�;���¶n9�����K4�8�Y,}�_�:k�l�¿ٮ��N&<ۛ�A~r&���H��HKx�Y����������!�9��lI�(6n���y�j@j봟����[/�Z��6@�j����5��Z��u� Lnh�}���3����f|~�(g>�w$U�N}�9F�V�ԠH���Ht"����>���zq���U�ޓxy�� ;z�y��ri��_�9�����4��V��4rH9�|]��E��_�wѰR�K5K>���9 �Xz�6a-�ncP٧� ;F��T�ك��]�y��j����v0Q ������Sպ����>1��_2�M�����+b�$����f��_�����i�:��\뙴��CG^��9��K�rU>.ۥ"���8(A�H{����P�*�� E\�lP��V�� -�~�tS��Q����R��'��iG��'� "1#�8�;_)l7�m]�!��=C� ���kg3���Uu�pe��Ն�h~������G��rP���0�7��jap�է�ԓ- �U�1�m���\�+� ���P��=�Eͼ���Z�(�22Gm]W�n�I�*NM~=����Ս��eB��N{܄�L�y����X�B�xM� I��:h/'f��X��L�a}.�?����tM�\�O4�3ݵZz�|[���]�����QXT�����p����^����x U��F�3:����T�Z4eA�dR�'m{l��"D�%Bb��F����*=���zSOW����G@V�bAC�H�������h�A�6��op�1"/[��(�_��a��R�!�`��4a�N�x�ב�R�q�b�~W8������=����$|a3�����ϝèr��R��/����}���$}��h���/�ֆ��m+�W=}��j'��7d��UQ�c��w���7�~B�m�{���N�|�TԄ`���l�."�,&C�Gk�]��5d�tX۽�Ⱥs�Vs�0��e8;���.��4v���P�6�Q�M��~�t�%�Ii�OO���ߋ����?e�tC����L�� �b__���5����@R%#��*��?�ּ�t�1��d���(`�{���C�=�#���Z߆&l��M��OY4�_D�Zq$�1���k+�� m�}v�S��h�ܖ�ބ�ST����O��I!g8� M�ѱ��9;Gv��E����s���>:Q^��0���\��&�϶��s#��̚�y�0/Z=�Bc��z�4n(̿� }��o��oԭЃ��%B��#�����҇;{ ��i.���ΐ���s l��:k��Ã��iMӯYYr��3��:�� �E����r���!3�IHԟ=M�����vnb�>�.�#w/nz_�wd��Σ2�- ����?G_,�VN�5[������j/������˃��s�@����c��&4��Q�a�h��F,'%�be�{l�q��-}եM�{���f�0��;Ԛ�Ug�Pı�����2hZ�[�"��Qf�Cׁ��L���ju���19��~5��t���C�����z�VSimC�I�aB�kP\|x���B������d5DXES\���sqM�8Df�u��5�N�E�f�����/��A��s�$?����,(�j^C���?��% �A�YB��t�xE�� � �ڶ808M�����-35]����U���ȯ�J�lW��d,6�}Kd���ϵ�fqPw�Q&U��;8*����_���7s!�����[3��NJAl'��'����2~��Ϯ��%�J�A���HZ9��ײsd;��.�E�D�p�z|Bկ!ugc��VV����l�tݹ�� ���/�"��"2�3���Mp��"�����(�vm���Ӿ0����O����B�k�[�C3��*�Ʀ#A�jhϿc� t�����^$;z�(��; 8�.X���a�u��%~$��S����<� 5Z����q�otS�5��ٜ4^:����V<l��GxCg���5a�]����T(M��\�����������B`��x���`�<Tc����39�F%X&uB���0&�V����Y*�DK{r����V\���T:�?gX���H3�(G呠xLCr]��� fP�h�#�����P ��?�l�f�)�?�v�.��Q; ����'�Gq�Ϲ j6w���D]�� ) ������a���l��|Z�X6`����u`(@Kڞ.[��fc�c���L���!� ��I�Hz�0���) Zg��m�]���X_�9�&.��g|d�R͊�t�B�i",jO��c�6���f�*�:�y28^6�ttA༘���a| NRwU�YI'�?���������K,�D�eƣ������B)E<�]f/����}��r���x���t_0fe�rz� ��^gt$��}~?�:�'佃�3,��}Fh�� <h�{Q�deh���'��I���]�!���kݥU�h�CPU���B??#��P��g䊔w�)31���t�ƃ�Z�8����xR� �Uk��X�4�_7B�Un�4�UO|r��n�5�2`�sW�� Z���3�e��b��W�.�""��X��L2����?�T|��bB4yA��ŏ�驱D�S\bV9�㣆d�A?�,�l՟��� �>6B=��|�S:H�_��3��f�:�t7�p����Lb�0�&���)��q������H'��}=��+V@]��C��Р�ŀ�y�y�h*�5���MϿ�}�P�w��l��ú
Static task
static1
Behavioral task
behavioral1
Sample
6a69c29078a74aeaee0dd0afff599aa40b5b9e7691d92c7ac79c1c895d59184c.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
6a69c29078a74aeaee0dd0afff599aa40b5b9e7691d92c7ac79c1c895d59184c.exe
Resource
win11-20240802-en
General
-
Target
6a69c29078a74aeaee0dd0afff599aa40b5b9e7691d92c7ac79c1c895d59184c
-
Size
3.1MB
-
MD5
228427ccd2549005532eebabb56a916b
-
SHA1
036eac2a2761cf7abdf70f8ac94f3f54cbdada9b
-
SHA256
6a69c29078a74aeaee0dd0afff599aa40b5b9e7691d92c7ac79c1c895d59184c
-
SHA512
207cd2203cadf87b095cd8c05b344dedf926ec6b4f721cc3c0281c510e5e57e868b3828eda8e98c4b4b218aca1c6bdc51625927b3290fc0f749c4647f0bc069d
-
SSDEEP
49152:gcIxGMiWd+uxO1Pr9IFBywYxXGIH4cFO2ypCA+96VtOEOtGhu2+4CK:3IxzEpxwYx2IYWNA+sVtOEOtGhJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a69c29078a74aeaee0dd0afff599aa40b5b9e7691d92c7ac79c1c895d59184c
Files
-
6a69c29078a74aeaee0dd0afff599aa40b5b9e7691d92c7ac79c1c895d59184c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE