H5��`��dܠ{l巈��>��&�>�YeGٽ�!���z��I�Ew�Q���9��z�%E���ke>�n>6zWw���p`�B��%����Ek�Y��>�B����C9ّA��WXz`sX���d�� �F���Y��wX�}��5\N�7����@)q�ԧ�띭2�N����apqa��6ѓ]�} U���!�'���]�����9�'j���A8�Izdy��o��E&٭&0g�?��c&�=�-gS�T�H0Ջ��G��St+_����}D�����8��hTÐs;�鈖F���uK��p�$���5�ф���N��'ޥ����k��,�h�p�G��0��K�2]�&����p �J��'��%�������`zw���7��s'-�^��RH��aQKs#P ?�T�hӼ"8ԆT/p�zm���F�O�[�c5A���9�]Hc,����J�?[̝����㡒ݝ�2v�:Ci[���v:��sov���n�Z�d�Q���=݃״����!�b�ғ��� �hL��E�&Cndd��_�O�Bq�FB6�2�p�+؎B�"��� �I�|C�kO�l䄱ԗE�mg)c���:�������������ȆC^��I�D�X�洪<���5G�.���G?0i��Q��H�P�Jq�k� 6v���ȑh��2�9k�o�O�<��łf�s����q��V���5#��ǤK���1�G��jȾ=@_w�8��q��[/t������wU��^Aq�`����G�]�2ߨ�=������X�-*Q`��WӖl��e���L�y�<� ����]`&W�6����q�nt��{�q)��Xl�m�+4*���3�E#�s2L��M�'Έpa� �b$٩g� �A�j-��)��q���/�� ���}����M�b����MSV}Q!J�C��q\h������!i]���}��7�W(/=�/�7�7Òt��ʳ����������/V�wr�p뽇V&"m��L�ӧ��'*��+8Bm��k�9�Ҋ�26�8�������ؒP��õ���G�-�����re\ƻ������!*KQ��גA��Z�[Z�/_W�@p�LA�V]1�̶ �����.���5ؠ��ݗ�����Y��㗢��tg��`� �L��,E<@ʶ�N��岦��1]�U��B��mP�����N���*��ڢ����x �J�HŌt��C ֙��ɩ"��Z�KO���%Wɋ$���f'��VXg�˴f�x/����$�q�[FH����)��@Vn\�P �/��ˇ*�{ˁѨ�8��~Lk�2I������bEvUe��9�kA��G��ي#Y�%ۦ�:�}���>H#W+G����EM��&��8m����߂@ꁠI�xL��l�K�h��C���h��f��j4j��x��U5�e� uf妌��(��|MԷۍ�MeK����t�v��TȞ�J���ZH���1]I���1�e�������[��V����M���E]8.���R�}�.�[Y=�}�5h�=�7��0��8��r����7�u �����b�},@j��?m�u#�D��}5�8�{oQ7���fW?Rb�9�с�� ����U����O��\)1���7]�;�?a�����&���Ӹ_�,{����1��y�㚱v��9߯=H՜N���7&ce�7�����/Du> ��c�ԍ��p]e\i�'�N!&�=\B���v9�a�!�M�Z�M��+����$:���~�.oV��r�Ub3���(����uex�G���&ǚioͷ&��:�S�u:7���;z+�m���'���[��6��Wo��p3`=Db���_���`�+��s�v]H�?g�M��B���2�H���}#{����$-�����_t%�m�$��#2v���ط��KtB�W�Ҏ2����ùo�M�Wv���i D�`�*=��ݦ/���,�Z��*�#f��x3��d�>� � v��~�Y����QBri�6�x�5z��\*���n��l�UDI���z����D��<Ά�f[fn���a��sD0�_W�s1.C.f�j�&��-Fs���;f"mUjkN+G}=�H�g������4�<�Q��4l���5P{�D���H�8OqL�Յ�ɴ#��K+�u� C�<"�ݚfo`�2U���]bЯ�rT�8���^��5: �ɘ����by����H)��D��y��PS5�>�u��b���i�2����m_*U����]&�q��?d��~���ߘ�ԧNW,�n�==K�\ �=tRV���c.�E#�s������-LշP�-k>KE9�Wr�*���Fe��ף����������P�M��b�{yg�~E�\���0��.P���*K��D���B��kQ_~| �����~���ԩ�*i�;�d'-���v\��Ӣ=��04��y c���)`;=;vT)y�=n������,�EcK4��.�5Țm���KDE�O�H�$cR�2���c��,ڂ�q�^�����9"J�)�M��}} ���� �x*�Dhߧ�]��$�˸(�"��j�-�tg�^����܄D�m�o�9��+�'�WPN.����þ_qi/��]�M5(��z��(fY/w�^��P?0N� �ʃ�T͇�����p��ޔ��Gթ�&%++jN������$!������7���| �q���%C�|�Y�����LP\��^��y��i+3�r^���C[��7j�u�'g�>�������hb�)ĸ'���r�3S� x��1��b��߽uͨ؛F��)9��i�#g�w�K_�f>�E��u0�۶F�)܉o*��Ud�A-K�p� p��8),'����� D�O��2�W��}����Uy�H�������(����P�o�.~f� sY�=AU���F(����R�Lamx�s���_N� ,�t�iq����So��ǘ�x Ku�r�MU���I��a��eP�ӟ6?@���2m�@�Z��5']b� kW*�ݪ�D<b��L��!T�Y���}�s������G�3���T��lY���� ��q�(DL{� �B�/�s�^�s=��~��5��
Static task
static1
Behavioral task
behavioral1
Sample
e6f675c352e17a82b67be9b7b26666960c9f38b29b112b32cebf03c2b81909bd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e6f675c352e17a82b67be9b7b26666960c9f38b29b112b32cebf03c2b81909bd.exe
Resource
win10v2004-20240802-en
General
-
Target
e6f675c352e17a82b67be9b7b26666960c9f38b29b112b32cebf03c2b81909bd
-
Size
3.7MB
-
MD5
20bf7b9501c78e54cd8439f97b895b4c
-
SHA1
3689970a1ffac533e753dc805d8982394a367b42
-
SHA256
e6f675c352e17a82b67be9b7b26666960c9f38b29b112b32cebf03c2b81909bd
-
SHA512
ba844e3f032480a001fb8059f90e9dbd84223541fe31b78da5e104df0ab8eb5ca0cb0bcdd1aadc0242cbd5b031972e45c84b056be6b6f006d45b86c6054d4ebd
-
SSDEEP
98304:e8FeYhGRU67noOZQcVtUaONWF66sInrbwbL4BN8kkE8:pFeYhGR97oOOwVCWhrbuLIN83
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6f675c352e17a82b67be9b7b26666960c9f38b29b112b32cebf03c2b81909bd
Files
-
e6f675c352e17a82b67be9b7b26666960c9f38b29b112b32cebf03c2b81909bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 512KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 676KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 180KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE