���]$�KtWc0�$��D�>�p��Re�p�`L��esD��'3���xm�Ip��ɠ.Ee,��$$Z���r����>k�]�nB�N������1�%!/5�q��@���֜pʻm�Gu�X�1�,������q�f��t��*���[�DŽp���T��,��6�����;N�����4�vIcϳH?�0k�$�AZ�p|@����szKfU�/�^nĝ3e��жa�����(�(��vn��T>�ˢ�7 l�N�����pF�&�/b9�PJv�B2��^81�����ޖPx4�T=�gI,@8&oj1i�I!l�Yj�H�4�T�h���Z G��}LJ�����Z�s�j ' ���8�z �]��V6H;q���H��t�"���|�40��qhPݺ�50��^�M�_��4J�v��&�U�M��Kn��P�7n.� ·�1S4����� ����_|��A�E{�]��3�Y�N���7Qf�H�D=��F�jlȨ���j8Ń��������z���¦A��[��U:/�ܔ�S�I��A��-x���g�F�VE�a�_�������}k�_����6x���o��p�_�K�Cd5�Sn����-�}c�rz�)(�d�R%� ���,�:�Wdd�J\$���S�2� S�H�T��K�@����sV$z�e뤽��"FӼ�S��I����%ZhI��'F�JV��f�O�(b�q�xgN��.��|����ɧɱa[��5Ф����7��������r-�-�7d��u�.:�X�z1D���Jᾕ��l�������2yIW{��^���5Z��xϝ����o *�k���^�t��%��Q��Q�Lj�2��$�z�2-�~����2�>HP����Z)�cP�3��o#�W�������^/��+9[a��%GD[�}O��G��)L���:�ɼ�賡zi�ܟ�o��{��:"�϶3��l�It=Z�H��|m3�;���'�n0���P��9�Ǖ��C2��ֶ/���! ���R�:�D�����]�lF��,E��le��ʱ����V�7f� r����������������?S����6cBo,ښH�r��T�}ހD��z>3�"���G���$������#r�Vp;���d�.��kڒ_g�@�� Mr����a�jYl�:�V=h��3��8f.>�S����� D@=H||/tg��q���!�SBE:�����(��xE��0��D�W|mu�'��=��l�B�܇���.��m)��ؿcSR�,���Hv���A�����W���a��%T4kg#�q�X�s�3v�0D���S���G�,���ɂ���O��(�y-,���7��ՙ���"H�l����yϜ[ӆ}9�lKt�Y��{ѪvPg��ՙ5�1�4lQ�}7����Ԅ-����Q��:��&�AKUL��nk������;��M��|״v�� �6LvL��r�7�D� �����a�P�WiS�˼(�� �;52vn5�7��4b(�-��|$ڴ*��W��+�3+)�/��fE��)�G�A��3�g�K�!���Rl���� �ք���2v�㱫���^�����)�M�~��Hq���zE��%Hd�o������6/j��k��+"�ymHD� N�����~]��V�S�uT��:�{� �Hk�̓/�7zl�_�d��%a#�<�˽j��B����O[p���偩O�1w��fG&�6� �A'<N����cẔ���c CaEB(�u�����O ��β�>2������~o���#�(1¾]&�?���M��;����Tt77;V (��$�&�6�J�/��h�g�Wav�� /3'�}ә#�(�����\5d�+�)����f��K���d|�8#%��+7 (8�L�w��<����J�XN��Fb�>sFU xq80CPA�oDm�� ��Ԝ�e"Qk�DsT,��g�}]CL,Ej��rz�Ɏ��vL��������V[�^�A�E ��a�25���{bAZ�S� ���}�4ק6*)���P���\�����(����dk�*d&uE5&����k�z��c� ���� ؽ��ő�����ޏ��f�.�y���|3���K_{S�Q#H�3�����ɛe1�|�JJ��4�,@����:������ˆU�~Or�l"XR��h��� <h���ƅ��nӷ������g����a;U��ə���(an �SHƢ� ��K��QZ՚ij�EI��.�`_h�.s�F�o< ��x�Пb�Ʉθ�J���)�c�W�B��[�*���,��x�Q�n��u���л\>��Ό��j�� �)�J�o���W���T�P�ʹ��`���p��>��#���+̣`œDB��8���MO����X$���W|����z����Xa�b�h�֢B�^xY�4�J:~�� ��v��I� �L�s�1�"��:�@��H�uYJ�ٓ_>��C �M��A,R�Ƹ"�G���c��iX&�c��Tn�BC�Pqs��a3����¨dw;e��ॴ*6߮\��G�B��3U��*�@2ዙ���2�A��ߘ��sb4�����i�l��3*���,D�~�F�jnb$�N�G�� ����{����^� �0��xy�K����W�p�8�w�u��-�OizyI=��6����4'<��=�(�:��m `�34�ڪ��=$_�U�8>,=m���p4��ı�K��>\����tx�&���Z�^�!����#[T��18ηL�M�������1�0���ʮ�(˘�Z�sJ��j��� �~�lI�HK�G�����!� `c�N@�O\����ݜ�?|�4�m|�Oɕ�x����&0��p��):L�;��(Y�k��)�o�u4���c;h�*�$=��=%"��'��ȰU,3��rmj�-\ll<D�Wdf<r��ث���[�}����b�mA�<� 5~�s�NW3��c�e>͓�c�u3-�jC��~WgA��~�i�����^�o& ˴�*���|wR:��-�cT�e{V%�.dM����C���#��Y�Z
Static task
static1
Behavioral task
behavioral1
Sample
38b26726d4e88008d96fbb8e7124512d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38b26726d4e88008d96fbb8e7124512d.exe
Resource
win10v2004-20231215-en
General
-
Target
38b26726d4e88008d96fbb8e7124512d
-
Size
80KB
-
MD5
38b26726d4e88008d96fbb8e7124512d
-
SHA1
b354ad0b1605dc9470bc5427e7cc525675da37b8
-
SHA256
03dcc0d39539a6b63fb05d75453a987ae4c4590f90fe21f7e4804f48d22b51cc
-
SHA512
a17b4227c26eb8f0df6486e70eefd6452ab71e0d84da43c19873731290efb9e97b7ee4d116b0164f0253a611049fddbc1dc578c991a9cafc2bfae53271d53a36
-
SSDEEP
1536:lDeKVg2bKZCumFB02OoQvkrsDeDvxt6P4Hml9IQMwtBgxFy4i:lDeKSALFBnLY4sDelbHmzvBG2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b26726d4e88008d96fbb8e7124512d
Files
-
38b26726d4e88008d96fbb8e7124512d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code1 Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ