$��L��X��3���}���P���5�h,j���+��.�Q�o���R���>i�̝��pS�+�f��t�:���YT��� $d������+ܟ���?K3� �)bc|A��O�@Ӆ8����������G�-��"��~w{f��ay�.(Yt�̑�i����fL�wA���r�JԱ��mw��L<j�`��<��y��)���x�x�<���Jd$YQ�5�G�� �V� ����Pc)�%���D~��C#�ਪ&���^�}2�\�<db}I�u��)�@��b��?�P͍��U��+�R�~�ՓA���w���Ά\���6��aFJ/Z!���b��uM�N-#��+5�v�9�=\fWy��,�zΠ9�2�����[���*�$�p,��T��� �)�Z���=Y&��� 96��Oe&E�?�}��A^�~��3;^F-�U�?�\hg}�~z��xes*�Ro�TeҢ4AZ��M���/��V���bx�7�m^ �����-�����H_�����4\�U'����0xK�f����c����N���r�2(�>��e�G�Ǹ�ޏ��q~�����5duw2g��P�Ъ)kc���#����@��1��)�^+ ap� B�E��'&I� T@��"��{�Ŋ�+*��zm+r� �.,��4��y��x�����0�qsb��bG^��i���3�������z+��ĵZ5��`FO�y�� $��Or�ʛmKENX����M�矖O+?Vdvټ�C���,wt���4L�߹XY�^�]�L{զV�� �ysZ �D�b9��ޣo��{�}�;(�2l��t�������B��+���5]��v��_5�Hγ����]���ഷn<�&Z6��"#�������x_�-��Λ����̾�QS��v:As����iH�!�R�MU��{�ا�%���`�d.��- ©땲�ʿ�PN�$��g%�h�R���lvSǹb���O��;HT�,�Eϧ��9f�����'ި�!�����a��S��Dפ��ސ�9Ar/g�!�+�܍�v������� &ZNEF�G$'fI4:����&i�+[�i;n�֦����|�A��F�QRFB�����n��8�����U����5խ]�z1�1��w��~��̂�[�Bvy!a]���%Fc��W��/[�)~:/1�����y�8�>��$��/ޡ�g�A�>�q���[���E��%����t��v���iq:���\�c�RԆf(I�LU�%l���(��3�����Ax&���������rR?6ՠ��Yg˅FV�GL�_��<n����� i�I;6�řGFj�H��.��v�0�#�����*n���[c� }S�M^���=<'&؉Z<�ݚ��S����z��e���5��\>�����齄^ݖ���@�Լ�|�n������'�|�{�Ձ�`e��� �qG�a��@�Umx뉻��k�5�tܒ,�"�!)����v��&d��O\�������S9�g�s!*��-�rw�a�p��7S!�.�� �V�o`����R!� E'�8��0�����OIc2��=��f+0�u痖�<��v֔Q������������G�f�,8q@��Y�N�}��1�˗�7U�I�8y1/��q| �3"c�qփU�G��\��M+���K蜶@{g�j1� u� �a��r'����@������Urx���f��������Iz�$�d�"ai�a����)�8���\�̵��!P�E@���I��e籩�(eM�m��_��o���@_�'R�7U7av>���r� =���Ğ����kHʨ�dg��F�i�L[6�v���/���1�E�I]�e��1�Zx Jjx��*�̶��8�B~O�b��0fĦ(GI~U���RH��M�H7ԯ�a������ ��J�W���Y'`t.%�dQXZM�8碠��O˫��c��� w}Q�z}���V�[�$SP«^�GJ��S)�]f�(��k� Ũ���h�H��<�&�ߍj�I �f��wH�u͊�$�n�^�'�g�:-ڳ\c���Wo.���x�p�������o�n�ʙ�S�L��Fy�C��Vd�vwy;��(�}9��`7��똆�'Q��� �s�I�&�����Q*RD �ZSl���m\@���|3\���=4��Vc�t�I�W���NOw[����6�����#��阩Ώ}�c%�e�t=W��_P� �ߛ;���N�|H!�@e�S������ L�.��;%��̷�K�Q�� �jf�Dd�E�#4��N$G�uk����|��I�&�=PѦ(����/º����9ƹ۬h��$Yp��$^ԩ+hA]�G��gV�(�]��-LO�;�Ui���+����!V��Pw!ML�C'��6B�?�e���¶�;�t�����EW`�����B�JE���}y8}D(�̸���l�Ƨ�g������� m] ���L�/��o�զx�\��9�c�#e�ka0�|f���J]����i��Q���fGD���l�99ţ�U����t������j�~��a4LK9��=��V���;�-� \�ފ�o�&�w,�$������nc�������{��u��Ϧ��õ �z8�=� `,����b��`Q��孉�;�*U��Ho�bj �G������`N-���K|j9�[�?�����| �I���Q����l�m�[�Yu��|!D�<gTU��L8x�t���k��R�W]��l��R3!��[�]�-�۠����#���T�@�r�(���G���^�������]._] �}ZSN�5��F�$�0��DWT�U�K��#��@�H�a���Z�����c��|3��@kW�qm����������k�c��Ǵ�`:���<�������|���K-'�Q}K���1x��Y$��� �잧�~�˳D�Z�*賷���U��v�Dॴ8鍋Y _xs*��H�%�'�^�^�ݻ�(������!���E�|nBrbC��P$o�-w�.|,�G�%s�b�x�ݯ��-'T.���.zǁ����;��$o��F_�hss!����������;�����n�]]䚘��O����#]b��@�!�e�"����j�qM=qG9,ZTL��R�,�@�+��d��-"@BZ�
Static task
static1
Behavioral task
behavioral1
Sample
15edb437e6db0e11b1887a24247409f10b3390d805f225ce79d777af6a2815ca.exe
Resource
win10v2004-20240226-en
General
-
Target
15edb437e6db0e11b1887a24247409f10b3390d805f225ce79d777af6a2815ca
-
Size
2.9MB
-
MD5
395650c1280afd598cf5c38cb84113b3
-
SHA1
5d6ac669629406e864ef3be1ffa48938e7ef913e
-
SHA256
15edb437e6db0e11b1887a24247409f10b3390d805f225ce79d777af6a2815ca
-
SHA512
71f96709b057b3ecc0bf9089b1e48b24ea62d8f4b79745d73b7dec8d9a7db739e13c67a1a170c38ac08e76da4f867aea562a1d0402c41740ebc558d430352e74
-
SSDEEP
49152:U/sKYvbHeTFm9fSn9knAf0/E2Xp8ql43f+KWF9IPpcgnk59sB3OS2/KAbchePACs:U0B7dfqkn//vXyqKqEs59sFOr/ZrXrI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15edb437e6db0e11b1887a24247409f10b3390d805f225ce79d777af6a2815ca
Files
-
15edb437e6db0e11b1887a24247409f10b3390d805f225ce79d777af6a2815ca.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE