���?�I��'�ax&�ӦUv\�b@D���2���֩�\��ǰD�.>�.���V!EO<e\l�@N�n4z�k�@m�."bش9��*�������Fǫ��J��m6��������B����Sf�h��O����#ӱ��A~�2� ?�m�ɽ��n^�ؤgs�����O�W*l�5"U��$�Y�E[R��:���&%�n,E��8�Ѳ� !��cw9ĀB8����U��p�O�?��y���@??&����D��p1C.�Uk�"fۗEI@��R���B��|Ւ�`@O��ۊH�_bQ�晧�/H;!��7Rz�l���W>��m�M� 4ʬ�BD�5ѻ � JN�Jus����!&C�\�"h�RP���2X���2yF.�N���\�؆��̩:������e!����~���?M��Y�>�J���;�{P�g�j�`����|�l��3��;#��uA�4����k�V�S�$����/몿��ErW3���M4$�c��K�sh��#'Y]���;�:HN�21�'� ���QP*�0�)�D�&}o�� �p�sf7�% _#0�f�\��yM�@�Sq܂��/��ݯ�1q����ڲ�MaU�\ўN�]�R����:�O�t6rU���=����k���� �-Q�ZЕ#����?�.�����?w_&��{wg���:"�q�<�لb�e���0f(7,�}?D}ѱ�FV����� I���7�& 6Q3!DzG�qI�v�5�7v��ƛ��$���hư�G���-����4��z�Qez]�-�8.��om1��d=��vGd�O��&�����Ԟ=�о7�Q�Qz%Z����Ip���q1��U�@!��K����y�"��$j�/�`�ƙ2f��J?"�����{��0g�Fȍ�z�@a�����E��e��%�_SL���a�^�;�2-},��e�go���O��B0���Ls��M߅�Ȟ�Z�N��m��2�g��`4a�vy+G^2Y� Z� Rz C�k���Z��mT�w���zW��J>��Il����UR-�q�0�ʟ�� �r�ўŭj�<1��ca�r3Y����OG&{i�I>AV�������-|�Ɵ_E��uU��s:{��m4���}�g�ﳷ�ؒ�Ϥ���c��Zƍ����/O_A�1����+L�*1&���SY����D7�px&�($���S�(�M��I%��14ig5����J�@{kw4��X���M�.|J���Ee�� �:���.T5���� �ηu������b��W.$(��ap�rljxj����S#"�8���W����]��H�f�X����R��\ 3�h��cP`�l�5�u��N�wmO��J�?x�SD�ʼ3�c��(��s~���-<Ӫ3�K�=��Oglk�=�R<\�W���zn;�j�,��1�]О�U��y1�ֵ�2��V�h��R��{f�,0Ҧ ��C���^�/���mP(4*1����#��1e��M��\Y��:X�� m��ܝ�'d5�}��x���p.�z��{��T�B�s����^G�y�i���7F+�1>ՈA�zi��tz�j��C%Я�qc��4��I���X����n�X�p`��i��4�5��иb='�]@��6j��h?T���m������7t$IY`:�W[�?w����o�s��٪�C���8pb;���8l���{�W�P�4S�po�:_sB���$�&R��m�c�P�HT�Ŏ��n� /��QL��_{��ڮ�zF�����ƕ�x1Z��T| ]�a�f���ٙ����/�"�+Yϣ�}.���Ԫ�i�]'^�kJ�DM����T=%��$,5iv�?y�:�!-D��:0en�����!� 箷"Eg�ȏ�f.)�d��<�;� �Z�{�M��Fh9�jCi����wG�����X~�=�LWA檚�x1������#kh�7eH�^������Ʃ��P��-���6����|'I��D)~�T��u4O��x3u��3b�g�%��ZU����U[l��Nl���V"�R��o�.i���̿��5%���� ?�6g�;t6TD!��Dv�J=H0������:m�Ҳ,LT�G�)�/抸�K���J6�~|�){&�9��3�}����A�]��{��c��~�7���&����~!��H4'�_�����s����o�Vf�������D�%�[������˄|N�����Ӷ����EI�����NO,����<6턈��)�� 3�eQ�_Bg@uV� z#<�����ɡ|a�4,Ԗ��]}-������Ζ��6��Bů������(���,��)c��moU��js���#:�i������7�������8���T{x�f�T43�A��4J�I%�N�cM�B6�(�)i���C�V���a�c��V�X��qC����G��-�?(G�B9+mgц+gG���V�$y���o�� S`J� pE�Hەk�[9Y.�4���p�Ɨ|�f<F���S�Xa˧ه�y���B$as����Nt%��Р�nΟ�+�p��B�-�J�&꧹n����oT��j>�8 ��Jl����M��p9�S�g����t����o�`8X��8���%��v����F�߆y���Ջ�:|��-��o#�ҽ��Y���P����Z�5�S�|���-f��]�rKà��QL�r]�k��?b<����0����$5�!������ѳ��(B����ԭ���}D N��K�4�ǣ��!do!��k���c�7���]O5��L������瘃��T�� %fh巻��hzb��BaR�ߌ�E�^�F�A���C(������ժm���hT����b�8k���� �̠>�������n�8ݿ|{~y@�b��R� � y�B�5�h�(�p�Ջ {��"fe�߂�9s�������2�n��r��*�Md�����z9 X�9Og��J,D!\������!4�� h� 47�����տ��jf���'=��u���wv�,�^�g��ZW6�g1�xd�x�̛،8/�9���|`R�4������-�׆�mfW����H�usr(/��n �v[K�L�g���� ���Uu���?�Y�ׇ�.�N����U�M�$�c�m��8]5q�X�������5��^�_��%w�<���|3h�%^�+��8HN$S�T��A'�QA�[mP�%�*�a>d��QL�ݥ�R-Ku9�g ����]?������t�=�W<�kŎ����ꒋ�q�&�س�i�ad[�@H]T�e���xy�:�j���S�ZL�u�="�B���d�qڲt$$�E�MEx�P�k�uNm� �c�ݰ��$(5�R�N�Qр�|�S��ʅыΖ��<�+��_��m�RE6R����%�8��:���o�W�"��?YLt����oň�{�<�\p �xYN���ŃFϣ`��(��B��ttb���K���>}��T)9���lnrS���f��)�~_Ʋ6�.��m����l�8M�����e�(�|Ӎ&�`\+�[T���r����"6k�7i�N݅2]̢k�ʻ:��l�D�Η��j;���/�ŏ��l�AU�G�������J��7�⒂;�q�ϥ���}�P�iO{Eb+�z2U~����䔌���>��3��V�{��W�$�6�ݰL�������5r՛р}����ba|g m��#�*��k��R�7��|��?�(�$���<�JVD/]�SK,W�
Static task
static1
Behavioral task
behavioral1
Sample
15943779ca1bde9ab4d2df2eccb55c38.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15943779ca1bde9ab4d2df2eccb55c38.exe
Resource
win10v2004-20231222-en
General
-
Target
15943779ca1bde9ab4d2df2eccb55c38
-
Size
2.3MB
-
MD5
15943779ca1bde9ab4d2df2eccb55c38
-
SHA1
1b10c9f4015ec35d84b132411c177d7ca69681df
-
SHA256
2c4d2678cbc026cefbb439ded7d7529c6d1939bce5be181fa19101d08e8fa74c
-
SHA512
e057851df5543cb624b9bbedf929ddc7293d1f69bcb9ac09e68192588335abf1f1c7c9f57be485826302831df262910fba583ae86629368b47cdc1e45fd7c797
-
SSDEEP
49152:0EnzsakF+2H4FPw1sJP2mLW089m8VLBLfkqB0p30rS0605ksaBp:pnYVnH4pRPHh8dBoqy905ksi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15943779ca1bde9ab4d2df2eccb55c38
Files
-
15943779ca1bde9ab4d2df2eccb55c38.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 47KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 204KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE