[����=%���֥8������:k-z����w0�z}�:�c�e[���hҧ�:��7:҈��!��)6Y惇�I�F������`���̲L��� �'Pͭ���1�BLs5���DD�{�N�%$[��,~���������:��LA�'�7�!�n��4�B&:N��[�lX��b^�#�ak-�SI����i�U�B��4*>S�p�։�����z�97q\f����磏3~��G�S,�KB�)h�/ś�#�+���H2��e�����ՊPۼ����`�7��-�4&�="����#]�n�~r/|�K��|K�B�.���Is�4��$�j��ɹM�����6�!�dg�P5�a���_� i˚�� \���ox�V��/Pf��QX���S��7�ag�����#η����FB���b��ZU�ʖKH�|�ɡQ�6�O{��3�����Gl"G�v�Ex6��T�'�k+!������J&E�칗ȼN��4c���WR+�v�m Q��$Z��^8#���m��FVk�Ⱝ�v������y�$%ͣ.��䞘A��OK� �@Wj�::�����"%8�.Eª��nA��rj���lA���F�����a�V�1���8���1ʞ��1���mk����ޝ6��(����j�B���A���e��-挧~U���������و�PB����&!���8Ѱ�m��;�C�L�xZ���h�������[����*�j+����������A�,����oZv�`���}VR`j@��[L1�Ģ\fL���tLi�����c/����N��]|Ɗ�C� L������{�9Es_��i�m(vB=�z�ol�e�#�\,w�Y��;R�]�Y4 YgO��ٶU��G�a���>[Y��]��L��So5��B ,�$H=���܌�讆��Ʃ%gD��Rj�d���8^�و�t�^^A��֞��6C���7�W�Ѷ�����6j3�ļ5�Afd�+�-�9y�p1�7�b�j����.���Q�(��L��k٥[���<gK^F�k�W����դ������j��$���ţ��-]�h��ʪpͪ\q�������> AE/?��V����'*_%G:[t�i�;�Ϛq �n)>ǿiN���߭n�A���z�o�1���Lc`:��<����&uw��c?3K��&��N�S��UL�K1n�x�g��}�Ü}�v�&O��pdw���>��Q �j��f����ZʹBe&iNsd��On��a�s��>�f�;�|�!{� V,����5�q0ً�N}}�+�A��ܧ� ''�c�I��߄��Lk�������pl��Q���H��Jp��|l�]�?�dO��v&u����A��6+Ѝ��VD ��ߍ���2U�39�܀���'#V<2�/���MW�#������J�k���"#�i��Ƿ��]j����K��/u^&uD�]Цƹm~��;��A�)�P�κ � P�r�1�dO�1���}*���U�o�H=��q5gG�7FUYc�04X���J֩5���W�a`kO)"�2�+օ�}S�����V`���0�駨s�S�hȠ�pN�� �%+�G �~�;e��|>��*`�J��wL�@ؖ�\w1%\�>�K)���]�� w�V;�ه��%V�|֍L(��\ʳ��{�&&Vd�!Z�l�͠�@*��P��M�T2I8e�ǢB���Y1 WA�ɞY+Ha���4�l����zŇ�����bU*���RF�k�?��v��3c�M���bJ��]ɨ9�����8�5��1i�v��t�DނzpɊa��JO�~`�46f*���9?^V숤�톱m�)�F�t�L�C���S�l8�ؿ�K+*�`��e�D��� ����Q2����keF��Y���V������616n���k C1�����̓ܝ�x�-Y"�,C΅���挎��Dc�����g��O�x/�iS88���ܧ�����?�#������H��V�s�XdM�i�*�!k�qr���0c�H��}m����? �����^�V�ͣ"@��������G�n��>����n0��Ӟ�&��^[3��HE��Ϊ�/5mB����i)�����F��*���q:�L���H�-�7FSc�nw�o�!����t��ITN�wS��E�K?W��p��S�#����\)�n� ��x9� مfz��\���pT�kܯl`x���q����jl�y�J�J'�θ l&^+G�~����N�@�fꉶ���}��8��p���w)�ڮ�(�'��Ԣ�Dt�1k}0m�,˸�]3&���F$���X�����4�$D'��\_oDx[�H4u���� )Z�t5M���rɊLū�#���YGj�=j$Zk���j3Q6+#]��'���*�̃4[։�|�56lSd� .��F}̺��P^������r�ɰ�e� ��1��=Ɍ5�hG�.��p�f՟�r5�[>�s"{~0� pHMR������X+ϚT����4)����w'5�Ej@wS!S+`���r$4G|�Z'���XU��C�c��B�sc��=-9�4���lɎ�����{Z���)J��ӕh�0V�����!p�9k>'�*݊��%#μ2���{ ����bx��#��j��2�v����G�qK������2�JH8Ѯ�[��4��CC��j0����ˤ����Î���*�A�/��0�$���*A3��}��Q����Z~��=����:���!'��e`F-q[��d�3dq�FX��-��3��0.|`�q��]���ƧK~tބ�!��T����6��t�O=���;<N� ?`�G'��<�F�l�7y�r ]'��R����XkJ�h��\��nR,aM���يy+ۇ������?-���P��|�Ν�=��������Դ+ի;��~�(!�<i���9�U� �v�X���@�#�'�q87���ɑ��]����O�3m��}������c �����#��)��9ױ�\`��o#+V���`݈"=���I�7-�^�-ģ�$>�"��a�ILp��q� �����v�e�����"u��A�kB�����"�Q_�!e���W�Z-�y�@K�L�>�R����������[:�O;/���K��~����H�o��-��,��R?��Ö6X��IĨfj9!�t|���|�1���ZI�Ӳ壪�I��s�j�~��{٫�>Ϋ�E: �=�' ��=9a��^��ȫ����W��IN���<�T9y��_H�3�_�7��z F����Ͳ�̋�rQ�� ��Q=�y����ƥ���j~������rc�`ȃ8�,<�Q���3�<l2 �,��NҚ@���?ኮ˹hM8 �����v�}�}�!n`A�Ѐ�Y,BQ^p��g��hna�<w�~�k�-���%^e�%���Y�|v���l"�N4�,l��o�*��%���ynq7��ޥ��^T\U��{�����|ai>R�2�J\ms�,���zs� ��bl�p�i`TT4vO03k�q�f���Ox�pU:�0Q�o)��X n`��C�B��ϐH��ś^|΄~�<
Static task
static1
Behavioral task
behavioral1
Sample
d6532c08b6a5540924131e35bc9bd9c2753459676ad9102f6a8a9ca7ceef7b10.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d6532c08b6a5540924131e35bc9bd9c2753459676ad9102f6a8a9ca7ceef7b10.exe
Resource
win10v2004-20240802-en
General
-
Target
d6532c08b6a5540924131e35bc9bd9c2753459676ad9102f6a8a9ca7ceef7b10
-
Size
8.2MB
-
MD5
1a24bac57d522f178adb2cc5f27287be
-
SHA1
a7b99ace6f7b28c9145122bad24fe2de4224e323
-
SHA256
d6532c08b6a5540924131e35bc9bd9c2753459676ad9102f6a8a9ca7ceef7b10
-
SHA512
046b148488e038ff42ac31302a8488758e675a39e09b438ec245530712e57762b0fd102b55486553585ce0420a09417ded521d10522493f3d4681e80e9d51534
-
SSDEEP
196608:nH3Bm2ObVXQOu/YgN7enYjGOkGVxhxDqcNLVJ3:nH3B6pgOu/jhwYjGQVxhx2cJr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6532c08b6a5540924131e35bc9bd9c2753459676ad9102f6a8a9ca7ceef7b10
Files
-
d6532c08b6a5540924131e35bc9bd9c2753459676ad9102f6a8a9ca7ceef7b10.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.8MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 196KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alta Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE