�Kf�Y��"ў�c�ZS�C���W���GLp�tS�]��Z���?��,e.=*�Cs�V ��t�j�������A���4�i�!�&�����ԇ�����2M���R�n�k?�i�c逝1�#ׂ�����n���S���<Z#U���a!� O��L�p���'� �_d2PU�<�Z�[��<��ղ�%��{l�^��ع-� �\�@,���vl�������AĭN(��+�uK ��� ����J��8�Ւj��S7d娮^*|t|�]���*y�K����Sy�9ۂY��On���VR�A^�X6=��U@!r9�P�����b\�SMb��~L�i�*�\F�]xaW����j��;G0�7�G�Ŏ�/�F![�F��|�k!uؔ ��<W��O/F�E>.�p���'0���*J��d����� (^�T� Q-cg'4�h^ 骛�`��o�ݵ�w-U�M�*���B��p~;$c����>��!f�q�Z����M��g�⚌nRd��1��{�|��;����ʷT�I/��3�B(����!��5o3�@��m�V��衱�+GE����r��2�^{ٛ�{��F���:�H�����ml��o=''�[b���/ֶ3��R�H���'�� N� ��`r�=�X6(]c����_�$�S�c�1�^���\]����t�^_:�W8E�-N���t6��Ա|�S?`0���Eށ�F���?�@kLtP��&��P #㩆 / �^����?}#�ξ��g�uI�^����9פ���o�����v��>oH�A&Tb��.�~��S,��]�|����ЁR�����xV�2�&��fٶ0v���\��R[�i��K�h���g#8q1Х���"�^�!���k$2�[Q��~�1��}��?5�&�m���6�%�uu�0xѡVAB0�|�оn~<��L\��*���xgY�u��8�,+��e��=.�M�2(;z�2�Gq3!P�lq��)����=���\�IB���l�Qe5� ��[�X/�K��vk5I�RP-)�"�?���Xc>6��,�i� � ��#��� mW�mBǵ����͍p��}�_��ϕTT�ғ���v�7=��]����ُ�-}�q��ITrT@� xo�mg&XtU�����床�Y� UMo$#�l�'D���&�B�!�B�p��� li�l1.j##��a��b���=]$���:�)6�9F�(TJ��s� ĀG ȣT� R��4�O��q2�gE��FOw>Ƞ �u�F�6�^�*ę��F0���W Ͻ� H��aԃ���^T�U��x��&��U���ӔH������h�¹_������С�*�#h�T�ѿ0+[�s��U* Wj����[`����ZiR�t˅'��k����l�L#J�$i�.��fiBE�}Vr�HF4f+D�"�T�!֬E�m��9S�>y��]�@l<MVE�֎UY��z���H�|x��>�4�BO"q1c�v����(�$&� �_¬��ځ�uͫ�W31��8 c��$x�F��-����T{^�����8���w`��AU�*2��i �KRd�J�P�:5���}�R ��9�ۦ��{����*�Ky�)*�A�*zl�w�7e�>G:ȹ@�f.�^�Fk�Vynvu�wTf��Ehl�v5}�g@��Ҕ� \Huք��ީ�[?�+z��d��b���V�_9�ݶ�����w�f�gG�aٌI���-��L�bC2��?*5X�|��V��qhC�#i�\_ҙI��r�zG��pa�ﱓs)�D�ן�����`�^*j ���Z��kwz �ٰ��3HmK�H_� �\���M��~y�?�[j�8/%4���o��8�U�hC�/�Yh��l��DP��{��;T�0 �v���B��T~m�F����}[��CX�-��Ƀ�� ��0���J���ҹ䰿�nހ4���K��:������� �����d�0S_�����h`�zy,�f�]1v+� ��a�В���G~�:+q=CۛX 9����+�YG�ŲR��m��?�kuM&���>��d��Lر<t�Ю\8�V� ~2 �?�|[A����k#У�]ķ����� 4�M�R�$41S�1������ZJ�?w^Ә���խ�5��{��1U �x��ŭٜw9�����4r X��)Ժ8�}�v�ۨ;-��r�����+~�_�u���z���X"���ocIa��x�=��/�Bӧ�� +˱Am��G&��\�T��%!�Ӭ���Z�w9�Y��T��ߠma��O=�����l�R��5�yԋ���HU�riKINC[��/T�pN>Z���g��S�U�̣:����^�'(��#g�>"��MU�m�R4vf�`q�l)�L��'�sK�C �I�]�T|����7��|�qз���Ȱ�5��>�Es�z�/�3�I`�|Lj�0{؆�:%P�@2a�ݴ30O��:�BlW����f��xY��8ΐ�-i��́��:����U��#A��;�j��FPp5�����E4��%�t&q>���u���I|�Y��/�OHT��$m�p�䣰b�1�d��������NY�o�r��~X�r}.jܤ�H������3`�(�m��0d`@�.����q�d(ԶV�c�Hn z�@� Ƿ�6��V:�� %����1��`"bh#?���Y inn�5Lt{]�:������b���]�Q ��F'�]0;H���B|�c�cI#�&�__�wͤw��҅���E������q��l�u曁��k�oLBv�k��Od��IV��XQ_9���VX���c\��$�*�f����D��f���N�W:R�zl�a1^��7���]6oGaH7��@#읐�TtyR}G�h8��'��8+x"_J��������u<y�$��yXt�c�b�S\���4?ŦI<XU�4�I0��ׇw���e+0����I�o��F�� UW�Ȥ�p�f��÷,���+�5����>ڢD�� �����m7d���!��/�F;~yZ?���2=x}�U�A��q��xS���i<g��Q�i�Ϊ��@���x�[�����/#)�A�*����M1#я" ~e(��\W����~F��ի��V��(p������*�������������<��N��������-�W��<���lK�١�q`��%����?7�w�}4k�iO蜕�O��� �ʂ���,O�\G�H��Fm�Rڢ��ŅCz �ڂ _��S+_�H��ZH#���6����K��E���V} 4����W��A%��l�"�6zi������>2�|W���=N�{�og��g���<o���,�.��*ݣ�{���4O��?'^�d�̤*/U�Ɣ��ZHw�˫�-=s.J�=N��4RM�������G;�y�t���_���(�P��c�b*v�x+q��a�(�w���q��MV��Sڍ&�A�a0�ut[cF�����^���*���f�??�bG\%Lf��X��<kI_�����K5�Z��K��� �w�rjQI��``n
Static task
static1
Behavioral task
behavioral1
Sample
6dabd54b6653afa8d90e87baa071da6e9ccc283193855eb747acd3f7ab53a273.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6dabd54b6653afa8d90e87baa071da6e9ccc283193855eb747acd3f7ab53a273.exe
Resource
win10v2004-20240802-en
General
-
Target
6dabd54b6653afa8d90e87baa071da6e9ccc283193855eb747acd3f7ab53a273
-
Size
4.1MB
-
MD5
f7376e9b99582289a320db07bcd5fa0f
-
SHA1
b6613238d5445c497f4cb1fb8d6aea6ccdfa0f48
-
SHA256
6dabd54b6653afa8d90e87baa071da6e9ccc283193855eb747acd3f7ab53a273
-
SHA512
f95d5616fb9c93f3b5b1f45e5f80557e33cf0de17da89b3b3aec31b19452b980a20080204f60d0d72a8acc0413dfee2b3e3ae603aaebec35d4982553351cbe36
-
SSDEEP
98304:m4giCka+Mn+C88JxpgranZ4Nogh3rVX+xUyaj9QaYh:dCUCNtgranxgh3gxt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dabd54b6653afa8d90e87baa071da6e9ccc283193855eb747acd3f7ab53a273
Files
-
6dabd54b6653afa8d90e87baa071da6e9ccc283193855eb747acd3f7ab53a273.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 2.0MB - Virtual size: 13.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE