w�Θ���{���"�<��z�Y���8�g���Ǵ�Y��]�:4/���@��[K�~X�h �ߝ�g�8���� �ig����nkkHR:䏌'��E��1u��l ����sa�j��S����@�w Ϣ<F�ߖz��U�][٩��?�#>�76>��]��H9��Iz0����y nT���_�9�7�\4I�Xq2�n�eyZ|����x�8c7��V�r�������v?p� y&ve��;3��0��o>B����u i���-@u���T�o���==e,�b�˝�U���x>��bS�����.@�ɧB|O5�n_�Gi�Ud ���'����3��v��I��n�S� K�'N~��`%�dȷ����i%T���?�X�!:1L،��[��O!*�D �#~�6(S��D��Ь5���:�z���Y:z��}{sz���q!{-g��*�W�� OG��*�n�^j"�� �*�2E��"/E���M��8���f�7�sll�Yr��K�4S��y�۠�� ���v���gJ�p�����&t��f��� �c��%���Y1 �|qn>���?䵗B�����هX�3atn:�w�ceG<c��~��m��ĥ�O���H���jX�D�YBv�Zi��#?�O<��E���f�����8��J��Ŧ����H�:k ���o�AeE:��h�D��q�V�^'9'^PV�"�Gu�J��2� �����L���.U�7�ϛ\��O���F=b����< 4����k5�5�p��Q/��3Q��"�D=d�P�J�dޕ(�h��v^9���l�O<��nqI)�� �pe����P4G��c�Ԕ�y�� f<�2"E����f��K}ƭ2�1�f�B�՝������Ll���'w�c]��@�w��=��$��[xQ̕���#ܮ�-����7���R������J�����W'�}����c�T�亹ͬl�͍$�B ��"Ϧ {I,�G�_\�Έ�ܟP#Y��$P����{�<��w�|��� ܳ����Z�� [��a�6��'�s=s �)���w���g��_p�"A�� Q�-���9�b�Y����s���{'xDSd��B4T���{=[L���x�`��J�Ь�k(�)cL�!�{`�Z��V���<�o��9��V*��W���t�s"9)6ܳ�]L'�,��ޭ�3�9�`ʓI���q'Wk�e>lu���X��1c���C>��:9cHO��+'���� nOA8�ǃ�G��������e�'/��px.|��~�8��ئu�H��(�+��oK >4sQ��?� ]^��"�!�L5��w^�M�,;RMl���oM2_���ʐɱ�;�����60�� �7��싿~��syi�+w�����\i�<��)���4Ԕ�]��ɩ����3�͍?xˊ������<t�Ұn���0V_X��a�n0� c�T�lJ�-Xm2�=2��r�&��*X�{���v���+���V��Њ� ���{�M9Q�&����f�p4���A_[���f������0bQ4MJ�GQm��&�ŭV0�*�� ��G\��M=�^��g~PVD��S#������,���3b��9���� ��>��-��L6��] ��H��w�V'�8�#o�,�;�ȫ�wrp0@혖��B�xa}.���/�f�p���}{.t%�v�F�� #�"q���OIi+.��k��%Q���&��;��"W٬�4�E'�1 [�iC������gp��q ?����o��4�a�]��ju�����X@s�B��OM�E��+����.���d��~�ĕ1(<I/� .���*��~�ߒ0A���~�9�o(��䡱��N�]:��(\4Dm��(-rN�|���U���������S�06��ʣta��O����4~�?�߷�����6��WQ��waNB|�q�,_}���)��� �cn=Q���I��~��L���#�����wT������"UTs;㻘/{f2:��t ����;&���@1�&�l=1"�k��'$�k��1�5=���6�!^�P5�{&�K�D�"���eưCU�0�ً�8��Jl2u"�,۩z�;��S� ����ք�e}+�<'��Ao@����^��RIF��2cL�-�i��@�'>�85�v�� �+mB�BB!ѵ���X����@���Kzp��>J� Aq�~~]����t�2)��{���{�7�)/�����X�������_3Uj" ��ۨ���-�E�S"&Q���O�����K50v�F����i�x�����+�Y��-%�E��_n7���ɇ���$���"M����(T !��~�h��.`q5�r���~��}B�}Xβk��DPA��g����Z�+��95��͋$"j����Ȟ&І��^��5G0ۜ���A���t!��f�G��=A��� �CXq����1f��=g���Q�&��]Y��uOwo�=�m�g���(Z���)��*&B�3NjI�y �*8����Ku�S�rn�s�$���64lo���cCI��@��YA�Q7���(ʩ��&U^�+�KB;��M��m����'>f�(c�o�����|lN?���ܭ[��+�.��1�:fWt< �Zvn�%��;�4Rs�P�.@�����^���b>b��ş=����oJ�eQn;��:`�����V����ָ�l�����ظ�|'�z�rJ)<����r����$�΅tE�wY��ȹeǀ%�����h���"ݝR_.�4[1��b�� [�_J%�[w���(�ED�������s2���6���_�&,#�G7a������#����m.�w�i(��3�5]�E�1 �ɼ�H=4�^-���\�ôŰ���͖u�F�!6 ��x��A� ��j9j���!��@��q-T����z��W���l���;�Yre��}���}��Y 9�1�b����5� �(�i�5,U����\c-�)���1��ZFCl�@�������,�������4�� Y���(��D��y�md � ~��n� ���"C� ��h+ >��'>�w� �'���{�ί7*��*Z/>l�UI��s��`ڳ;����AF�-���nV�D�2' ��T0�P��=J���4�m֏��=�d27/UY�D��/�Dٚ`ف_3�8!��F��Ȓ �t�{��lm+�D�j�D� ��=��`IM��0F��x����������n:5�J�7�W %�l`1��� ����[��k���b.[3wx&�����7�]5)n�!�a����3��w�c����u� ����>@J��?«�"�WeO�qyn�~qM���C�^ ���,I /���cH��K�^��"���բ��~��ƣҙk���w]���L?��d��C)z{2S�M������Ü��z�<Ǖ��o��Z� �1窌6\HC�.a97=�`}����=�]b-� �%U^��&�_,�
Static task
static1
Behavioral task
behavioral1
Sample
06902e21f593ee1506894387489dcd78adc3cf9176bc1640d7ce5fec98157698.exe
Resource
win7-20240611-en
General
-
Target
06902e21f593ee1506894387489dcd78adc3cf9176bc1640d7ce5fec98157698
-
Size
2.4MB
-
MD5
788896b0b3e5bb5824228dc037fec7bb
-
SHA1
1c6fe7c59e037058bd713930e87178cd6113d8e6
-
SHA256
06902e21f593ee1506894387489dcd78adc3cf9176bc1640d7ce5fec98157698
-
SHA512
bc4e141b824ede98741353a422c9b77deb710a170ed09d94ae327ee91f693ff7a4e53ffaeabd532459cceaf3c4a22d6f8f506b7fb451787faa4100e948e1009a
-
SSDEEP
49152:Y2DOK707A18y1aomKaP6Hxc7BnRXroRrgEF034Fhve7J2Oe1udw/0wt:5VXXmKac+9rEF84FtgIOe1ww/0G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 06902e21f593ee1506894387489dcd78adc3cf9176bc1640d7ce5fec98157698
Files
-
06902e21f593ee1506894387489dcd78adc3cf9176bc1640d7ce5fec98157698.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE