�w��[��9�W�?�ƍb�����r��C��bx.�x��>��3|Z���$��զ�Զց�~����Z��mFmNԈw]����=��"����^� �!Yi�1*vMݣ��+���Ѧ�<4<J[�SC��c��{s�E�NB�����;G�8�/��:� `�cF��O#I����%Ҁ.@j�["��p��IT�K���P<���B-,���i��B�M�tg���ҵ ���!��<�e�� �KE����S��D-3T\�}]\Š3�1p@:�E��*������d�j��t�q�#Q��ol&���#�fc��j��8Z�@��k(%ưD�`�=͊��ĠR�~�,�H� T�Q������W��;�4�U/{2O;�bV�;��6(?!�.���&>l�M�@��0f���Ks�^X�4wh�!ް��G���r��b�� 1�e;u>}�e������sN͌�G|��P:�S8>���ę�)�E��Mm���.e��c!i�@ȓ�/uR�*z��ێ��2(�MI����N�p��i�����(��1���k�H|ߊQr2�o��%hl��V�F�J�ĩ��bлBD�F�,?� m�2/�/;g�rFcJ� �+�P��Ou�"����.: �����.�P��n��J�XމbR�Û�DL]>�,�Cg{�����+B(\�c��Vu�uD?�f�8��5����w�hzp`|��M��W3Ap�|-��u�7+���Kl�e�H�!��w_�_� ����)$�� �0IMLбe�Vi��vn���?�eU�T�S#U����E/|8�-�:R'�b������l�ٍ� !Ow T. <|�[O�VGS�>{����~�:2�f��{i; �������F�����Ћ(����}��F�37ق^�%��>�+|Z)uN:��+ sw�"�_��<&��~��V�ݐ]>�� ��}�@���.���K�Zr��%-u �������w�@���XA����oM�l����R��B��k]�)���m]�%}�<(t��2��;����q@p���ռ�%'�^W��-���Z��N���Wp�Qt�ks�d�����'������U���g�hgu�p�(=�p�S�{٫��n,h����2f}��׳�?n��^KX���O���tx ϊw�tV) ��j��5M̽��u�,<���N���4�(F�=,w��9��]]��=�XK7xA���a�I���qw��J[7���H�4�^m_Sf��/O�"�n^v�N@oT'�]�_v�ӧ�A@[?�n�+Txv�O�4ן���~�(�:��٣�]p^1A ���T,�ͮ��<���H#��_����M �����@��c����A�YO��4��q���A�R�qhvQ�Qk�>���sLw��m�l�����E�^q��k�� 3��h��,f˴�]B���n" � ��`MI���WZh��r������7��JDޘ}�6<�w.W%�DїR�L���l�vi~$6`���D�V�����pq$��P�̒��ve����@f�}��Ʊ�M�v�����Y��?�`�j����ߛ�,�~����Beյ����$�+/VE�B�FǙ� &�y-�6���-^sX@��]3a[�"�ym���se�:Ӵ�H��9���ⴶ����� �"���ϰ�웡���aNn)� jYh��{��� ��S�*�ܿ�4�?<+���mn.}qgT ������-P�.��A�3�8�A�{��E'�O��7ʱſ3�[T�Z��S�;Mb�O��o.�1X����Yn:�Ϡ��?(�H٥CG��������J��J��@D�����S������o��G?���3�,�i��\��x��j(��H.f��;+i��#Fط_5g�ҁA�K��d bo�l@`�W��K���X�`��hnw����l�"O\E5�g$�1V�r��u���X�5��'��5��Ǟ#ap~g�v I9�Y�D�2$l����r��bQLT(t�G�a|SZҙ@փ�S���H,��Å`"�B�*�Vs�d �2�OӈG� ���g��]���-��[U���%G/M����Ъ�x�ӻ(e�s�&���bF�e/<ɕ(|S�HO����쁕�6��#Zy��r@4}���S;sF���U���G�������#Ռ�e�e�� :(_$Һ1;��3�o~ �Z�����/Z���k�zC�te�*�[��Iu%d�V�Ě��{%c��dέ�-,r�d���~��]�v�Q��35���F� %΅M%i�\b��q]���ts~����K8�2�����t�9�f�@A���:䎊n��rH�6q������lS���9G�߽���'(}C�ՙ�`��C�d`���]��u8�����C���ݡ���S��PHN��i�/;g�� �n'����;�Mse!H���j�ٻ����nV�^Ax���>�RMO��ˌ�W�#�? b����]H�\A��T��?�����T �-2CZ?X]\U��\�-�(X�?O���]{g�d��T�a����z*�s7� �k�5�1�!����2gڱo)��{JyU��7�?H�E��C�����j�RG�ꁛ�l�����r���)���?�ٮDc��O8����47��GO������2s��f�����`�W�f��?ﯲ1�OLAj��"��G��a$���7���zu7Do{�6D�6$�Λ��Gy85����}ǭ+v�wn��?�Dh�FH���]��(�>(�՜��[����!���k O����|~a�`O�O7�hǷ���h����:#[;���������p�z)��� �0��+R%A�;��su��<�9��ا�l���ޘ@P�렾�@);�wM2��h��h� x��T���:��Q_�>;��'�I�G]��,GH����p��"�Q��^ژ�$ا����V�KW��T��-u�)\���<կn ����B#3ӗ,�"ŖV0d���x����Z�B+�f��I�>ۢ*8v���ox�9su\)_��s�B"�)�������A+��0��ҡ�鳅~iZ��^�!�f��3%� ��@O��i�g���DHt9�S�q��Mp���}ۭߚg~�O�^f]s� ��vF\��W�I����8�����r�MY����%����k�3.����J�Z��r��s���=V���u8�@lb �*e>v.��_���WD�F��S3er��6�"�?��SJ�֔�L����+|�A��T�Y����.1ŀ&>˳���)4D��.����(���-,_����1���ܟ����2��s���^K��=�ԃf=AwB���Ò*X~�/�<�G��Ё����T+X(���)���<rZ8pxq�p��3��b����(���K�-^�������\@�\��m,��V�U(��i��E3l�LR��t�"�U$x ^�O����*����.��!��Ä+>��jߛpO��/�����|48�����<� ,��<e�b
Static task
static1
Behavioral task
behavioral1
Sample
6689317ecb790f63a8fb1c5e6ca0e17bb113a8f0b086c2572c6dac267e634cca.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6689317ecb790f63a8fb1c5e6ca0e17bb113a8f0b086c2572c6dac267e634cca.exe
Resource
win10v2004-20240802-en
General
-
Target
6689317ecb790f63a8fb1c5e6ca0e17bb113a8f0b086c2572c6dac267e634cca.exe
-
Size
3.4MB
-
MD5
1e39051f272c9dd66693fcc1ae6aee05
-
SHA1
f60504bcff01280c4526b021bd6c111497122adb
-
SHA256
6689317ecb790f63a8fb1c5e6ca0e17bb113a8f0b086c2572c6dac267e634cca
-
SHA512
f86346021d53ac75dd953d7a5556b81b8b79ebafbd0ef21902a27da903f87e8e140402e5cf97564c35c1fe187699649be949de32f0fcf0de3a8af942e96debbd
-
SSDEEP
98304:17+LSnP94zHiut+bGAbqILvyx0L332Wmcg/Q:aSyz7AblvyWz14
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6689317ecb790f63a8fb1c5e6ca0e17bb113a8f0b086c2572c6dac267e634cca.exe
Files
-
6689317ecb790f63a8fb1c5e6ca0e17bb113a8f0b086c2572c6dac267e634cca.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 59KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE