]�?m����^�h�����*"h�p�z�-j�c!U ݯ6E��-8����F�zC��_����Z�|�(ҩF���qb����㣮�A�� @�nMv��N�+������;)1�&���x���E��!r�o��O�Ƈ ��$��0:���F�W�Ϸ/�H�w�4�&�������ڪ�kJu���Q6�M�H��������4��;jL+֣%k��H��q��9#�Gx��4g�i\Hn�3$�p>����"��rԻ�I5�� uP�_p'oa��^0�$LЂ��6�G�x�߉���3 ��n�2�&}Ǣ���% ���-��;-BZWpCQ�x�����e��GO�� �1���Ӯt/�+@��l���k�h�wS�>�q4$Y��"���8�����=JO�=3�/n�,����<�������ώ8G�(j)�?��U ��{���������p�4��uc��61��ݲ`��i(k�"�Kp�y�(�B�`���]Z�B���S�8����x����*"ƴjS%�%��h�[�V�j�/ca�5$�x}j�1��0�����!z�1u�[P�7k3��/���O�.�Ai��+z�,�Zf�pǠø�`�{�������f���p\;1���z�Aw�x�A���&�Ňm�Z�=���Q��ӱn$F��"gtm<5�a� ����iS/����l�7�+P`ܜ*����j�`hFy���ë�)�V4�uH ��偐��o����o��*�{�#~/��j��!R����1�Pm��&$�*J4�����JH3�8ʿn`�&�N�͌\5T��Nw��&g ge�(��mIpaF�@�XoEH���D~�aNm�a]?�H Ӊ��ƫx��r�8pS}�<0ή�G��a�D�h��I���.ΐfEv�� �*��0�aa���*�L�f�b��B����8��@5+Ll`��5ȳd�8�v#}"�Z|!S=jp �p�͈|���1й��7�"�i�K/2G�_����`T� �v V;oF_}U�I��´-(��{��ɽ�bO�%���d�����I6�u�ME7�@�t8L��� �z����`�ŪYT���f˨**D�3u��]�����p��!����IO�[�^S�<1>�o��FjcA��Dl�\҅��~~�(d��&c�H�Wz���^~J� � |O���l �;V���ឣ�&h�=��^m���Ph\˅0�2��{~弴.��T��S|6;�S/���W��%�ף�8pN��7& �Q߷d��-��Uٍy̋�>- ������6NL��b������-,�_���D����u�p��&���� ��S:�i$��5�.��qå�MʐAJ��k5�N��Pu����iL�j�4�;Cr~���T�ĭ���O���U�ҿ���A~�a����1�w�w�M�88m�4V�����s�����р�)���P�G�:'�^>�<2��+�v��^����s�5#�M���(�1E���@�l�ɲ�ȸ���j&����d ��D#�Ze$�i�V�M�X�R%�,^�AA�yd#����#����P����˘pe�է{�W��W3fM�����wV�^�%���0�z�?�&������u[�;��, 4�A��I��m��Ex�?��i6`����sӥ�^n%i�HlHʥ�A`:8� �3J�'��U_P@�81�} E�|5v��4��{�2�h��2 ��g��(������/)��0at��^Iel��D�� MV�W=f^�~�xȨO�i)� I+�3V��I���{ϑ}���o�ݕQ�f�[���Iy����;�⺨��!����?kS��S^� �I��p���L������H&�5g*Qk '+ In�^j�=������1������q`��f a}�ľ�DK����w��!��°�%SR�&������������c :�����O�7xňI��:ވ�X�=��$�[�zWܫ��Z0is-YN�*�,���qw��^�`�M���.c���w�E���Lj�ƻ�_&f���qfuA3�ӫ���3�Κ�k���}�8��;����"t~���s���W�=|������ぐ����˒(e��ց��y;�gg�[ˍtG/m���F��Z)db����U|)XA�o{JM��~�(�W��2�Qh�*d�0'z��a�E�����ۙ��?'�GYO(�+�=��x�!Et�]$�J4��� ��K�y��50�Wd_��������v����C��̆����1+;Մo�:ƍa�"-�5��;���\��R?a��x�}����֘BWT#�F8mJ�MY��d-�ȻO=�U�FR�g��iS=�D���l<Y�y,��O�x�O�Q�q��ö�}3�h�V�+p�T^U[� ��{�����/@^�i���G:]�O���,b��x4I��-&�xU�֖��u>Q�Q>p9�uJ@������T`�6�!�<=�|�v�/�5o��(U��_߶'��o��`C���WnC��l�RYʀ�v(]%� ]ִUxp�g$�x��Ȉ�zEw�<�����é�*�\��-�H�i�8�J���o�ڝie���?���m�A�p�]�+m�;fƽ�3VuQ7��lJr{�hu��kx��&B̚@�3}ڡc\n��=e���*!�+J5���2�gn�!b��'��3�DpЮZv��m�5`�.��`�O��Wr�`c��iJˊd����A�#N�I1�3\�r�j~�_�A�)��sJ���F(��/E����0Z���H侅�V�<�!�4&s� ��(_�9ս�p3���)[!VCb�p�M���pHgL�����'@c�ͩ��I`��Q�L�'oЎ�ܿoKjB���C-a�fç�4�J��s���"zTS� 6���f��C���o����$��9A~`�0��NP���U��%K�m呵xw�͜��48y���� !=o��r��J�t��S����M��|���s��'XO�ъD�߄Aω���<mݻTB�IZwZ�Mոځ6�7�V�,^"�KS]�fy�cjg�:uЗ���:|��%Hj8��a緇�w�s�����.���a��q��5����#��z������lh�qA���߁݇����Pf��\~b�Sq�����e$����r�;C�"y�1(W��D~�F���CD }���P��*Qy�Bߘ�j� �SLj���y�N���ўMA��%��r�ĩ��\�8mJ�o�fFi��Oq�zX��hMd���!#Y�?�5���T�^�L��q���h�3�a�2� �0��̾��%)5K%���QMLӲ�B\�V@@sD|�E}||~ib�~�4,| ����������$������������dX�3Q(�:�R_����g'���%C~�H8�[FS��:"�G9�⺨���N���X��Y,=�o�0�Rp���'��Hߕ��z�=�`8/�9�W��w1�k���\ZW�.����~D��h��K�i������`Ht��|�h�<�M,�����z����k��e&+ֶ��a,�:��ژ��j��'p�m��/����9)Շ�d���)W�v�j$���w!���ң�FH�K!�������N�����p�w�/���.*h�H��z?/�8���Z�߰����*����a3jy�Ĝ//��~<n>_,_����Be�]ka1E �+#nq�~��jL`y8�c(��M�^JyV���ϟO����tEx�S��
Static task
static1
Behavioral task
behavioral1
Sample
26ecb3c1eaa26ec8d65709a394cff504.exe
Resource
win7-20231215-en
General
-
Target
26ecb3c1eaa26ec8d65709a394cff504
-
Size
1.8MB
-
MD5
26ecb3c1eaa26ec8d65709a394cff504
-
SHA1
06e5503f01b2eff04393f5238a8cdd3c3d2997be
-
SHA256
3ac77b030926e71d76a781b9427e84fc98be0c32f6626899cb5531b83481d65a
-
SHA512
f00840f53fc1ff5b8c58f8ba52d8c3da9e53ed132de4fa870649e94126e5beb8231458dcbc75c300e9afebc09c2daca8d4219742385d29370a97c83322e4e1b6
-
SSDEEP
49152:dFQuEpq7Kb8jNz6qi8E6AV61MUBRFXD6:mpq2b8jNz6qiI1hBXT6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ecb3c1eaa26ec8d65709a394cff504
Files
-
26ecb3c1eaa26ec8d65709a394cff504.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 180KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 252KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE