�H�4]q2HH<w�!w[=�0�Ⱎ��-��ut@���U9/fX��y�;���{���V�$.4**��%B�-�Ev��[8 �Jf8��c���Q ��I�W����:k���������^(7^�3�y�\�Ђ��|#a�����!x�ַ��D���e�� ��)�n�4�T�[i�����k���c�m-� V+� xe���_���0��0G?V�8aJ���v�:۷�W8���<I����;��|���i;m6 \��P����TQQ.���^�BG3��k��� .��9�f�^Z�A-/ef�|���֔nu���N�?��׆=�`�JO#E}o4hW~��` ���3?l]��ׂo�N_bz}��])ma��N�=���;%Dє����xil�1/�Ī������þ�Z}�N��qW��ut�Pq��#o��䂋~'iA�I, weӌ����D�,�|���O�ܧZ1E;JU��{^���|�J��J��O�DZ�և/��/��K9Ʒ��+E�Z��� �1UH�M��ꦴ��\��S�k�%�;�k�iU��^�]p�@A�"n�7Q�)����[ȥ#|3� �K�֪�0d�#���Z a�C&��73,��% ���j�`�,B�|���N5N�r-}� 6��[�=��j��Y�e]ꪉVJ���R���ik���+1�\ fŬ9�����L!6P�Li�da�Z;hH'U$�������;g��̼��v���W���b�|�>\��Jih���\��#6���Y�ڮ�X�U���E�����_��e�f6Kq��d��x��yH�K�n�Y�՞��C3ʹW�\��E�w��E]�q�)����R�<ҡ��i��ȤڞD��@�:��?_���ޭ���@��]A��@��֟;tq栈�!� ���L�/@�D�T������-$A��h�E�[&C��d�(p�-�{</FL��M*l9�̺��� 1�K�,<�G�Α��g���x6��^�u%V���.f�����xL����9��`���S��,@��/���2,_�?�/�L*��#*. )t�=��p�0�(��篯�A��_c�� �*�:>�1�����u�t�/����Q��'�'��@ ��1� >դ��{��kIvY�a�iY)����,,�d$�J���� ���pt�z�8�x�v�]tU��#<��5��w�UQ�ȶ���y[�4�q�/��I0m{#g��<W�w�Yΐ����a[¡q �8O��xK��7�����R9e5���2�c�� Y��=T8S"�.? >Y�+�NUgEʖ6��b�<�/-��O���jov�w�6�����~H� =�c?�T��댱a-]>,�����<�1�Œf�M[ ��~�ee&�1x�4Q��@st���Z��hg�_eF�q����X���h�`�&&4���eL����^|RN"�#�� c�l���B�p�����SL0�l��,� X�\Y!X�fZ���6��!�\���XOn6�9ZPS�pY9�*���ĭ,y��|�4�9��ǧ�����"'��zF`�a�M^; �{5�q��0�����]}D������ �Z��%tѺ�Xaa�T����.y��I�V;�]��S����L���[z�6D�M�vYUd��.Ք���{�v�����l.ڳ�}<�2�Ek�FNd4�iEv/�����)���{_�tʐ`���@��'6At��6w������:��X�75�snbEP�5��z|�_|��Ò����Å�=�a��������p� �2�}�����(`h�TY���r��;�ؘn��Q;1�s����������3�'_�z����6I�^��xRnկ��+����F�i���D�+�˞0ʼ�{~�,c�Q�`J��嶚�c�B�ąU�M��+�55�1�9g+�n���T�V���5�{(�a��uI��.a�vP�לr��xz�"����4X�1{diス\z�#j���ٵUK���@�B�y�dB����e'�`]ǩ�ϑQa�(N� 2�&@.�8�6U)0B�ć�#ԟr,��f��O^��yX�RQ�k,&=���^$�uz�R�ۑ�<JcR1�L��,y#�)Tu%[%���{��QT��&�A�ס���.�v<����e�%�Q���#j~�t�;_��5���K���h/4.O$�03+�@]�E;�@�+��QL·��7�',����S�x�.5����ЅG���^o�ۓuo�;F "������H�y�g��i�� �bm�-����8�h"���������?�#d��etiVŦš�,�����tVF�9x��Vy���P�&�R҉ `ui~ p���f�sE�n�$��S�u�~���pˤ�f* �%���^ׂ�\�S<ޏ��Km�J�K��0^^0�>-fE��f]�w���HO�Ww���N�_���W�q�T:#�A{} �3:3�������V\8?�i��,Ы�Ua��#�*65��$���&�P� ��F�~"�K�8��2|G� �n��v�a��ʮ����Po�%lldv$A�ca��*�����v0��Zb�D����<�*�}A�G(� /_]�� NЄ瞰��wc~�V �`���B��4���7Ah>��K�XL/(���9/kF�.�P>�/9�GA^X�Db*'܋�v4�M�� ¸Fo+��!�����u\��S�id�Ut��f��$k�҈Q�\���x��S?�k)$�F��_.)@h����g��^�Г��[�{�D�3��g]���M�cY7yF ��/�"^Rm�����0���� Ϛ�����*�1V N(���s���Զ�+�t������~���wM���c~�4��Q;�u���2"=!���N��v��������<ߺ'�w��K��'�۟PD��\Z��A���}��E�� �^؇O>���}�/ ��~!C�o��b��\m��@��0��z�C�Kx��!�j��fQ��?�`�<��eK�(5��U����QƏ�3H6/R"�e���!�B���R��6A�m����oLD���]D��S�����ux���w(�0�_�v�iQ�(�j�eF���������,Ss[�`\���:P��n�/�+�PS��|�� �� �F��s �J�sy��ϵ�0�+�*:��ѵ�&��82��S�/B�/LG�Tz%��9�{�� �[,���G� �� 3��$I]�M��ސ�(^�xл#�3d�E�=[b4��`K�X�Ha�R!5<6!nS��Rl�7��!C�"��&,���!�����0J�P~s
Static task
static1
Behavioral task
behavioral1
Sample
d6b38b4c2b03fdce48aa3f3fe2bc2fb0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6b38b4c2b03fdce48aa3f3fe2bc2fb0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d6b38b4c2b03fdce48aa3f3fe2bc2fb0N
-
Size
4.1MB
-
MD5
d6b38b4c2b03fdce48aa3f3fe2bc2fb0
-
SHA1
c953682db18cb343a89149672c8692d755688c8e
-
SHA256
b68e413dcda195c772587c51cc6228958727f2be69f79f46fc0cf827e38f4434
-
SHA512
5e6ca3cbb397039250bafa51054ef68f3027ee2137906d0c6098ef1ace8c8afcec23d3b51d7d3559724b7530406ca1f65e18b6041a904505d1a15d1ba3430426
-
SSDEEP
98304:X6E4RqsuCv0HfdD0X0LLIuoCN7Uh/g0fq:X/iXaJ0X0LLIB07Og3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6b38b4c2b03fdce48aa3f3fe2bc2fb0N
Files
-
d6b38b4c2b03fdce48aa3f3fe2bc2fb0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE