g]�5�E�đ-զ����{z��f$�55��Ʉ-��C_�@X<�t��l7;taL�7m��W콴�9��8��Γ�d�ڮ4@qe��AzEÎ ��hj_�G�\�ʁZj��x�A�'� o`b�10Qq��Mbaӟm<&Q<�2�i;�����W�]� ��x|�pOUe���+�������ex��ơ�sBS�����:=w�1�λ����'B�� o#��P`kO�8E�%���Ț��]�d���,Y�A�X�N�i�W�d�6=<�>�Ss�����kKŐ��*�*5P�im {���ӕDc/~=+{Ȥ�DZ1��M<(q�F8>��â_��(��6p5z��Ü�?甔'�ZfE�ٜÖ�1my�wĦo��pgU���G�Fr�W��|K�~�(f(>4K�g�H͒������ ;d�|H�Y������D��C ��2cE���Nú�x~���a���^��܍��ȑo c�Ҁ��o���FEh��u� ��\�h�R��/NY�S�$����ͼjۏ�h��ߩ�I?&������Β.�MC.� ��� ���� #[��@�1���1���(��Ð���w�X}�m0v���(d������ ��IҳR{2�բ��1��h�.y-�Š�v�'-D|�Ȭ/��������a�+���]!G+U���VH�IWv��ߒ�409 @����6��48�뗑4���q1a�ro��К� G+�r�5,H ��H#8u�w���q��@��OKW�f�Oq ��V����<]�е<�ϱ%H�Ϻ����k���ЪE�͍+Mؓ�Jt� t����L���++DgaQv&�i�S:�� �rg,�jh��X�Z�p'��8h����[��&����ڃ�|M����N�zzB)p��nf��ēwD�K[����E���R�q:�H�\�zZ��!��6����뼘�� �=�A|�8v��%����}K+���_��Ȋ����K���1_���y��<���#��f>�v��L��M@����%x���d��+���\���fW�u�jR�G"ϕAd����gv�rA{݄o�OH�n!���<����)R�֣�J���j8~*�:���ь�g�7�������$�w�;��unSJ�:zPm{ `�<��ą�G� Ϫ��� ���oF䰋��d��5O�!�uq�/yiHk�-y=]��lY�3fu{�W��>{W��XA�%��G����W8���mw3@1��&���Z̓����t.�[�>�� R%~t#M>�M����p6?!3���z�"b�a��L?�x�[*!�o�P���E�c�!_P��[��ȋMDܱ�qǹ������2�5<����@���c~��w����#�^�Cg܄`B\s�7c� <l`�&��m�_kh7 %.^vKg̭ﮯ�(�(ݕ�&����X����G���+>�j��>m����#��͈eN�&bpP<SM�g��-��{(!ܺ�~u��D7yb{9�#������џ �]�&|�s!�-���|O]���t:~�B�dX��h�[5/U���Xj�B�����7/�Fv����i>�������)��S+̫3��>�/�ݐ���i�U������ņL;�>O,�&'o��Q��t!Q�q����n=u�C/�>'�⦔�ٌ���Z�}i.T j����8Ie����*��D�4?�κx�.�)��Ho��Dذ']�[k���LI�� ����_ �X�~*�i�g,)��DWJVL!w�"q�Ak�O�9�� �ȝޣ �#dآ�����fL�� ma�#=B�M|��F9��q�3��J@}��e�0��ҌǙ<xb�8Jt��Y�����H�u�h�^~D�7?���}�ؖ��B�!%�A�eV-�VQ�5B���*=8f�����������PG!���n},c-ʄ==���+�g���G���|\ERr2jlG���X�$���Ŷ��*��Pf�\�Cm�G�8��%E�_���ZP��R����b��nQw�}���m:��:��pz���r4䓳#�х�Dv`V.ޢ����z���!<;!>��]��F��jJ���2U(��C�&k8<���<mZ��O��9����Y�c�a]���>��-�9� ��m>\9�y �F�3gnW�҄��j'�g)�����h@�\�Aא, �����DsMyͲ����p�t?����Q&\�L ��ގJ���b�y[�7V��л�̥� L��m��cB&�E��V���'K4��x�9�XD`"��*��>Qܗ� �x�Q�Ty�B���5�6`��@l����E�N�b���� U!@�;`���1���afE()�A��X0~��� �Rn�����g��n��8�x´̔x�����j��/Ѳ�Z�\���h�X�U�W��ao��9D���O�oZޞ���Τd!��z� �6�%���m�Zq2���ԩ ��]�����d�.�מ��*?H���~UT.�1.��)ֽ1������{pFɺ��8���R��w�|3������"!�u�ǘK!E��Dt���j���{똠ݖE��g�e�� ��$���O�"k��u���R�A9�B�r�I�˹z��3�N��@,���I�m�2����%!4������ڙd���,s&��j�s�h����ԩ% �� !�xo������Z_�'��툓�������2�4 ��� �u6�T�j��5��e>�þ�v��H���.��n��D������y���E�Dy�բ�*tt��w����b���ґ�)�(称��m|8�m�k�������<]�FȬ����t���^[�V�h�G���JܢF���zhVuHq��#��`��^N{z�y'�x?j������p���vG�i�ӊ������K�n�KQ�ypL��V!�:N�^[R5U�����uI��V�������b#�H*F����bMryXX�bDZxDl�a�K'}9v.i�uVl"'k����⤋�P���pT�{���� �W�b�+��T���Ŭ@:e��l��Bn�z�W�5玬�}�C�.HA��ͪ�\5AMt�f��f\y%zۘ�$'Cq��r�.Pէ��l?ʼn7� R�O�~� �4f/�9i�G�S26��9Nx�n�������El>�� �-������R{�j��f���/�SW�Z�x8��p,J�s��8j ��7Y��pq�a9�����M1��amS�>U��4�@]�.s�lGaPY'�ڵw��]7��.Ij����y���G�۞�)}l{҂'=0�D\d�Ò�S��� ��L�Ҷ�m�Ԝ3P�+^�}���u� ��n�������߾��!c�=�Z��f����~���xA��1��ϴی�Y�<��M�niM".�n�k���P�q��@���#�e���9�_t
Static task
static1
Behavioral task
behavioral1
Sample
26ddce84f91475842bc08e44a8c0a9e0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
26ddce84f91475842bc08e44a8c0a9e0N.exe
Resource
win10v2004-20240802-en
General
-
Target
26ddce84f91475842bc08e44a8c0a9e0N.exe
-
Size
4.2MB
-
MD5
26ddce84f91475842bc08e44a8c0a9e0
-
SHA1
69719b7620a10e993010678e0b9d19789cc94b75
-
SHA256
68f94de7b53f346a6aae4a4f273304603ced87aea21b6787a218598db461a4b8
-
SHA512
37dbabd12cd51f23928241722c378dda25ca1e1e8a7dad9730ba15fc85a199ebb6626d4387f8f4442a3fcff0c8b97d0cf74188edb86bf9be7fe8ccb16dda0a2b
-
SSDEEP
98304:aGTL/txgOOozhJCqIZcrLpdqmQS449YO81hm:aGTjcfsJwcnqRJb1hm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ddce84f91475842bc08e44a8c0a9e0N.exe
Files
-
26ddce84f91475842bc08e44a8c0a9e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE