�|\F/ 0�J_#�XvT,*�^9��d�!!��<5N*le.m��5��M�T��f���;'�._�Ú�OMYZ��������Z2��������}?�fd�$� p_^�4�����:ü�d8���J�<�{Wv���!uC��|q����Ϗ����ވ��GDޤM4)���E9/�(Ǘk%�u������If�L����ާĔ��C���v�l�q����Qm��=����M����&��o�v3mꎒ��zl�����<��A�Nѯg��c������:�G 6o�� � ���?ZS�M�'bT(�ĄU��:GkJ�j��Q�i���C��x}N��;���C#��Ɣ�W��[.����$���]���#[�A� 6b�L��G��\�K�?�m$�n��~�d"(#0�G�)n�D����`�K���]s 4���rI��/X`O�6&�[Q�/ݙ{������3/1�����Sp� ��g5�z]xW|��O�m�ئ����T��P^��U��1�N����SA�Lz#�ňX�ѯ�gD�C�H��:�/���g�A���|��u�˺[�M��O\�JB�r��dpx #�B���� 7dC�ۦ-}�����tW�-� �:��v�PeLw4��7n�4���9 E�ӟ`���)i<'��ʑ�y���!��+����3�Y�D�Τ��(G�?Vd�K�V�/3�vhM��J��fj"?D� Mx{�%if�:FA���n0~�S���$3*��G�IU!t��7��2��&�s��+�W�چ�8R�QФ�_���pm�:���*�8X#z˦�%�nø�^�љ�8��h�3�~�l��Cr%Z�6�m��?qM9��Z�L@�u�3qPU�P)�P���h����{��o�4��'#�$U2!bK��aK�Jg=�t�h�w�t�j�Rtϕ�+f�+l�o�T.�<�������F�.��6!S\,RtD�^�[��R�l��5m�FlI�B�ۣ��x �s%l����������(xy����� ��z�@*���<�~6^K-���0 N<��|�@ f��+j����e5�I�����5�LP�L-L��(0����T<���COQ"*ڧh?���Q5R��v����� �Ʒ#M*��?�X�)��V"��t��JGD\T���v�\k�&����Ӕ/Be�tSk�I� ��Kr\>\��V7w�.&b�����lg�����>��eP� Á�uyʔ�<�� �vrg�]$[�B^x�����M�I$�?M�3��aF���8ْ�/��rk �O��/P��F�!�ZTZ���Ȋ�i�G�?�������(6mI$�IGE\7B�P��Y[�M��y�~ ���`sW�*�]�����Z �Ui�j��Bs;2ɡ�)����IjѹO����z�F����q�n���F�偙���sS�E9q�� l��x�,q@��M�������JG62L�����G.�WM��r&�ck�N�3l�����GM0RC�?���cf�g�x�S�d/6�`zcA���;a�@��#ﶤ���䮮���C����l�X�q��cׅՆ~� ����86���0e�q��6�!sم��|-� L6���vR�~�*����Lj����b��<��첽;��[��}��/��`��l�%���� ��h>ioyE��ߩ7����S�7��|�f� �RI�.��t�t�G?�z@j*�C�̰Y��Ԥ��Y�����E�����s��Y��VR�����7C�����4�UN��;��NN.�Dw����y�N��3�����N�yږZU�c6_,�7I��;:l�W��p�\0@���7W'4�k|�m���TL�P!5��څb��u��R��!W���*a���`|_'U��C#�Bp_�"��n�SW# R�V�>�}5 �%ѡ��P�=�мl*U<�i|�Z-ͷ<��>"��X��1�fDr�6�vɿ�� ��,s�g��+w���V�r[K/�uY�~���)��%X�W��01RKsi�K���g)~� e��B\L�^N9-a�.^6ƫM��f�di? 2��|O�0���������[%1Q����#��7��f���G@y<����˂���d4L��."$P[w���Wk#n��;��>.�X��"0���;Ji�hy����$U��,c��Y2�CW��@� 5l�~�8#x�>z�����A]�N��aM�'��2(7��*�����A�/O�L�2�=�� ����|;`gVoͤkW����r'�&�ȩ�A$#/� *�/L�_���C���~X7`M�)�~�$�(�i���s�����2�����& �xڳ����VZ���nݧz��ܩ`��X�8sBW��ny'��q�L��0}�zy��C��D�6*p����M��~�������f�E��X?t���b����ݛ���+��(R��X�l�vAg˜ hJKnއ]ϣ~�U���)J��9��Vt���x,�ٞ����fW��7T��erx��]ps��)r�Q=J���X�5�h�K`�n����{��2�b-hHvoVb�" <��*���d��^?u��pQ�g�XJ��@L��v����̯�so�l��|�K$��~�C�uYp{;!��7�jZ�B��&�p�7�<�D���T����҆���۠dڮ����?̪+L���n� �;�a��![���]�Η ��7Q�R���F6�۱��W g�r�8������c��e�k�kpP��-H�|��4��ikP�6�fҺ��4 �8��0��c�uٖ���<E`���k8�ҸcHMT���ի �� �Wv��fg��Ybnk@�&��� ���S. 3��ƒpJ����� � �.�*N$,�Z�H���>���r��M�f2���t��%W*�(�2�U�^�M�x�bO���<��c/ �xD�H��)tmEΡ1�ox� ��- !���jӧ���:���ո#�!�,�r����C� L�����P����MK���n�Ä���\����7��"mJ�L�v�c(���$[s�b�W��j��&FU����a`�zs��_H=�hXB�� � vfg�p)�Vh%?
Static task
static1
Behavioral task
behavioral1
Sample
15b7a9a420c80d9e2609f3933a23b233ddb6b3a0a6d0f28a92a20d2016f36cd7.exe
Resource
win7-20240704-en
General
-
Target
15b7a9a420c80d9e2609f3933a23b233ddb6b3a0a6d0f28a92a20d2016f36cd7.exe
-
Size
2.6MB
-
MD5
2b6f6836db46f93418fadfdb93672fe5
-
SHA1
27337907aa2d151ca7f8588ee9b6892e53585bb0
-
SHA256
15b7a9a420c80d9e2609f3933a23b233ddb6b3a0a6d0f28a92a20d2016f36cd7
-
SHA512
b76bbd1f84474d0e975bb1a202c85805d9e3e4f402da6c97917b6e782356ec91f7dcefc8c482c1f92208646c42383dc5fdc716b54fc40b06f10913b57ddc863a
-
SSDEEP
49152:MrQubkKYX4y96FhuD1qeMqlcnN2T2VVtxCmnmX8uSUwaHFyy:MrONB96fuhXMqiGQVtxHnLuSdal
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b7a9a420c80d9e2609f3933a23b233ddb6b3a0a6d0f28a92a20d2016f36cd7.exe
Files
-
15b7a9a420c80d9e2609f3933a23b233ddb6b3a0a6d0f28a92a20d2016f36cd7.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 19KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 499KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE