5?h�-�z~����������R˿�&_��te�:�S6st����&0MO��^��^&���������b�G$����p����糝�r��+sxJ*(&^��ހ�7�����!��'�����!r����rT���MI�1���F푝9�� V���z J�c�M�� �8^2k���(��O@�3�������۴9y�Xm*[֘��|�iG۸)�?@���q~���rz��dU�s�gx%����;|�����Ed4O��"yc���P����)���� ġHYfU��������R�D���i�����͠:n��Ǡ�P�L:�s��R�}��]"q>=D0`��/���9�wA�����q��I��-m ��f`��N[|�f�M��F�Ұ�O`$[�UB@+8�2ݍ�deX*A��ғ0��%8�~ZN�ñ8��Q������ع������LO�'nU�B�j��S'��4��$�B�zS9��_��������ώu"��B`sD����-��B��D���Z��O*�A�Y2�0�� �s*k���Eյ�ye�9��|�7������e�W��$�kյ�*�k!�h�N��b�)��p�|" ��#K9��.YЇ�3#�n��iE�|�y1��Vf��r���w.ix�?յ@u��L��"��ړ�ڭ�.b�w4��`�� ��.�F}�{SϜjp9Pϵt�,�/X�d���q�������wUfL�{hSy?-�X�߉58�\�$W������蓌�l�%M8!§ ��_��NW�N͋'�1����e�s�Y0����3����*�R��ɶb=(ƚ.��MUo�H��8= �-�6�cҘ��wѸ�ױ�8��9��wpH���"��R�c"�˼"��y����@��d�2�g���7ŋ�\�nʼn\���3�mqf2�V~��ķ=���$�t2'�Ü��+�/�c���ƶ��xMd�fx6�a��a�*,����Z�� �#�X�CγX�ϱ���'����z��Y��9g��D�^��"��Ę�_�DY���U�")�����}l�[�wP����K �<t��_<��]�^k���Դ!։�zq-��Z��vA�[�7���An��û��k�$+ǥ�팴Ó���!���`^��R���s�������#�¾r��;����kmQ~_KfJ�>j�Feά�&o,V������}H ��Q�pN6�8P�}\?D�aI���$ut~OH���x��+x�$�Ɓ�{��Z�{��_`%&���+r�eŊ�gXPl����|��zO@��VX��T�N�w9��g�ȕh������pZ.�5D���C_Ҷ�'����A�ި��v�h�SL�Y�2_��B��'5�A4��;����3����������Y���@�IH��-w@�܉�����y�q��{ϑ�� w�|�Ɇ��h]��4���v�y'^�D��l�ǀ)4�ܫ=m��c+��k:A�_�@��]�6�`4���ZI�^� ��<5����RQh�����P!b;��s��hy��&��_��Ľ�EO��t��n�������>=��ky��GkUH�(vOC�|�]��Bꅨ����>�1`��)Ny�4f�J�S<(���o�~���QU���\�e����pι�� e��Q]��_K�;�hm���ьJ��U�(��O������,1�|@�x��Y�������jt���B���*NP��>I9'��i��s�$a$ZT3F�c�'e`r��)���n]eԈv�ݴ �6�^��,1�J�92u��E���{�n�8(Q�Fo���7m~\;�,���0�{k�v�M펶k��">3]�}(8�A?j���G9�$� 4�<QF.\�I�t�7R��9�1CS��&��2�tEf����6��"�^6^N�pXolx����ӑ��2]���uG�Y�ߞΝY!Yݨ��1������P�ȮtX ߡ����k{��_�s��;]z��,��t����R�{=s���B�<���$���\�)�o>I/_�������29T���{�F��F����}�{���ϙ�g>�o4r��W\a�~iECf�°��"��Q������=d^��]YY,{���,'��@J�6�5H6kP�p� ���/����B:H� �t���E��4Lr���t_�tF���L;6ҥ���sƒ2�KO�¿<��5j^b�r�Z�:��/3vjJ�@rj��i;����%�:�f1��0�2��Y����E.]��Һߜ��j�uI�[�$'LC�=սN$L~fLxH������B�k��� G#�p k���?w��P���R�z:�F�����p���iP^�q}Q1S�}���X�a��C�C@]B�$�c�?_��}�Lw�z'n5�͵�6'0^��'�_8j^�10y@FH�f�|��Z��;*��;�\K*(�R�F1Mu�d����@�I�F:0��hDž�ɫ��$5fuV>ϔ���wE�8&�8#Բ���D|5^-���]a�rN"���Δ=X��\#y>-�!-y���ɖ���̶;�t~3�0I��6�P�nu��9����DŽ���0����94�C�(�Ѹ��y+y7��y v������O@��<��}:���!�2E�!j��0K�5�CJdp�*/C����2{ڰ�.���K>�`�ˍ�G���n��a�/l��D��" 'a��,�g7�����n�q)�Ź�si��o!kaq�z#7I�O1y�\M�E0��8 Y� �C�^��M&F���0f�]��]����"���w���?$���b�}�z��&�D�:�<� ? 6�c�� E���PXI+חǵ��T�e��q���FS;��a()�l�ܖ9�#���U�&�/��nJ����Hx��F�K�A�|4D�R,�Λ~� �cJ��=���l�����F"��\Y�{*���pX�M�0=�!�Ȭ�IUD�aŲդZiqL��o�ٛ:��E�;�p� ��kX����{�C��:_�������v�G��ҡFV|�7]V��矦���d��D@p���C��*���6������ ~�(�v����?�������D�K/�M��8$E*
Static task
static1
Behavioral task
behavioral1
Sample
6a6142e1db6ea25a3c317a64977db4f0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a6142e1db6ea25a3c317a64977db4f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
6a6142e1db6ea25a3c317a64977db4f0N.exe
-
Size
3.1MB
-
MD5
6a6142e1db6ea25a3c317a64977db4f0
-
SHA1
2b885231bbf1307cf2f55a8977e3f74e27631061
-
SHA256
b74949888a07baea2323e594dcccbc49904350ec176505720595f7ab7c3726f2
-
SHA512
7ea0a879d567e71ab7451d32d5b65c0bde1479328fff5d99982c00a422c89d260a152267bf12e42ad631e7d45f7212883ef09cfc065b56ba71d72decd28b13c7
-
SSDEEP
49152:R/FbXPXNCeQvDteT/dACDWLn9gMLmug6u8uGYRVR9rsjDw7yEuPdGBy83H:pFpChvpeT/BAn9rM6luTR98SyEulW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a6142e1db6ea25a3c317a64977db4f0N.exe
Files
-
6a6142e1db6ea25a3c317a64977db4f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE