ģ%wSrZG�&/�"�Iڞ~�6���ߠ��c�{6��<����=�r�>�Y��$��B���5�ǽᙦ�or����5�c!6�����Z�'������/;a�^�Dz���-�u��4��sEځ�mj�{:�?��C��`�$*ָ�1�9a�����J�{� �*$��z6pU^��g4Jϵ ��=)b�#-�_�F6ߦŹEK��l1�]���tb����\�@��=�፴,�O ֓�ҟ�% Y��a�5!J��3f5Xkk����t���X�� #�&��<���S��oA�����+����3����ӑI9�OY���W��~��������u�D��6j�[�A���!��h�Y��Qםb6��Y>D���Bs�p��G:��a�*q�1o�D���c[�AǸ��*N�?�p�<:`�U�J)�x���~9s�׆31��I��Z%C��ߴ�,�/E������{.�����8*�Dziᆱ�Q�'%4����6�hN;9\��*�nScTDՇ"�~��d�~;�e@�3o�s��Cm��圫�}WQv����)l��.�3�_x5�����v��$�BpG�q�p��!T84�ى�����[@�}^-1�8AaR����x =��S�O�P���-!+6�Q�*~���O�1�y_���s��t7$x�g�]ף�`�2��d�%s� ���ܖ,S�cX� oe�[����S&_�G�����w~4�O�>3���3%w�uz�a��a�`�����2<�SI��O��Dz�pQW�t��1�o֔�K,�.�U�j*�9��0��8������� ��NM��y�G�y�u[�a�z�K]��FK�Ǧ���]g����c�N��?8��-�+NV�t�T)�'��K[����d����o�CZ�v/"�G{o����b�"�4d��0!��6Mի��1�b�3�v�� ���4p�A~�D�%�T� aX�5W�S5*|���x�َ��c2SH��-�#}����Q���5�QL �.I��XJ/w�X��F��\��V����"0��4y$ũSpA�Kv��2�W먼��� x�Kͦ��^��e������uS4i KfK@��^��8�����Mz^ ��n��D�u��#���T�1�Z��� ���!�����'|F&�kx�4�[��'~ڟ�Q��m�0�ت��N�1^������`�'*5bo�+��������A#������=� o�PHt��pT�kޔ���yb�o�;?���f����ܷ����v�)j���M�RGx����0G�<�Е�A<��(I(��5��xh� S4|�\6W�/ �:�W,��ӊi;-�C^y�P��m���x$��r�� R���On)Logtn��h Ā�,ďӻ�TC���?NL��7��e63�e`�h�p��$��,1�s<T���U 3�Г�7z�;�RN�� c�$��Z�"��?]9X��'V���4&B�51H�s���~�C����QǙV(/�iӏ�2��T�6� $� ��vu0�!qw1>����T\ڜa���z���'�Z��L2c�h=�����30F%v�� ����w�UJ�3������� ����&UnJ��� ���������m���s N�j���>F������$���h������ƃ_IФ�1�C|bPg��B�C<�I��������j��ئ1���l�u��L��+�ݸm$�����Ww���a���vE�@J<��h�?���`�p���5+|�Ts��ȓ��d���&-�l>W���� ´ �jhZ0���U�Q(8����W }����6�"��l�ƺ����q���)�P��ѐ�B�=�ݘ�ɟD2^ ��̛ �m����;j��Ֆ�q�����V?�u��d��L|s�6�ص��|1 �IhrW0f�����l���H���^����6�S�r�aOg˂����=DӍ��lT��Y9�@�K�iZB4F�[ ;%|�?E�>�� Դ̨�B/3�y�vn�{F��k�Y�I�i��ϲ+C���É���@������!��0&B��$Ȃ9l���\Y.��]�%�Q��ϓd�����~s]3���°5����vq�A��3�l e~���x�Ͳ��N"������)S�����Q�b�tx!�tI�d; ���Й��:uQq�/0FB������$�9�5���d���Lp<�K����˺;]_|�����c��vI�k�U�y����@h���ɖX������9 ����b E}��Os�z.���}RnØ� ӌfe��D��i�q0{��j���і�w6���O��I�t�� \G�r��v�D)�W�KZR^.�[4x��f0N��8�Jk� )�m�9͙�*�9+y"��%��E`L��h�!���^G�Y�;��Try�]#�L��A���qc��qu���8Gؕ�axH8�N���gz˯y���w{��}�=G$�G���H!x���aVs w͠�D���Cp�Yi���m���H}P�� z���+"�a�I�c+�.�?H��2���`q�l��@=�ĖVIJ.�l8I9����_�qՌƶ�����;Ri/�y����"_mx�)�kߋ�3�����dP�v|W���G`�=ӕH�������4dL\�B���j�q���� ����aS:�������Cx}� ����My��w]��R7$G33��Eo!�f=)���%!q8PV��B��S�#��ehE3���dg!(�,��+Y�}@�e�c�rƏO]p��m�*b.|�'�1Ǖ����*��f�j�EE��M:mo���{�I2���r��ѶaA�mf6����]/$������(c��鵗ЄKO���j���8EXj �6v�D��'�'c�h�� ����x"'�����k���ݡ y�r]��t�0kڅ��&z���B�����&�A�r����*q�$'�M���*._Kۚ� Z$m�����7�4ڈ~䅢s�]EMd�U�y�(�z�+iQk7G����^ߣ*����5�N���V���*�y�*94��O�4��������wY��R��4���N
Static task
static1
Behavioral task
behavioral1
Sample
51e15a0a627e1e151a215c9771c60535fa7522c54f831a250735f233bc7b7048.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
51e15a0a627e1e151a215c9771c60535fa7522c54f831a250735f233bc7b7048.exe
Resource
win10-20220901-en
General
-
Target
51e15a0a627e1e151a215c9771c60535fa7522c54f831a250735f233bc7b7048
-
Size
3.5MB
-
MD5
691bb2440b4f32d62fbfcdace6fed2c6
-
SHA1
310b41ec1b9f9a32afca16c22653a7c51323def0
-
SHA256
51e15a0a627e1e151a215c9771c60535fa7522c54f831a250735f233bc7b7048
-
SHA512
cf11a9ce9194080d92c0474ddb42897fbfd0d624aedd672af1f3f1ef92297d6d6cc302518cddae3eacad7e31db0d81569713367494e44ac0658e46b6dac12021
-
SSDEEP
49152:E4BwELndkRS6/Vceh1PaCZBamie1RfMNPHHXQZJHh5jfantJcGXjgUyZhl:36cdkR/dcehIdFiBdag8gF/
Malware Config
Signatures
Files
-
51e15a0a627e1e151a215c9771c60535fa7522c54f831a250735f233bc7b7048.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 183KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 944KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cool Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE