��@�t��m2�Bf���v�}'P�ɔ���B�M`�l+5X1QJ�ό�8���?{|{I������������^�w1�F�Wi��v<0�_����p3 ����b��7{���ꡚ%B�F��v|�� ��RG����fŪ��i��>�Ҟc3B���a��� -YF�����]�a�w8�4B=��=���B��da��"��?s��b��[��X��<���I� 5+ņ��]R� kgb���|~��J3����f�L�ZfFw�|e������T�+O^hէZٟ�h3�Q'9�Sˤ���+��Y��gɝ˽�՟�"=�#wlҲ6z%�q�>���s�Tӫ,���U���sBIs�w!�B��o"C⡻5����� ���`I%�A� �Zg��\���ػj�Pb�M+�S��>�68 ���id;@0��8}���ʙ�#9�%�c��PAh��Y2~T�z��*`1.���|����L�f��!ðNc���^�_8�K�2����(�U�/���@��"ˤZ]��a3�c���8�Bx��8�#[c}!ŗ�����ux�������A��s�*�LU=FP�:�T��Tq�Kq�M�x� �i��Ը��f͆�=Gv���(��ì��v Ӎ�\f˩o*uԴ� ����S��M�Ƅ�T��G^H�����$��J�(��L��J\��u�0�ʨ����c/�n�O��N�`h�!tG�O;P�.X):�萁��ג��2O�����){Ij?畼�� ��@�C���%������T��}�k?`��O��`v��gG�J�"��a!�;������a7��0o\W�GE��SeT��s�P�b�Qi+~��m�E�l��b̷�R �$L�pa��l"{�%G��ԃ*Y�vuUBL� ��Ls�Z������y?��} �ź*zl�%#*�y8mG<��QG���w4���0e����N7�@��� i_ KS~��vk�p�,�*���W�o��X�=�ګE$�~�'���<�2�y��b��_a�ig���} i�<5|�ω7�?������/H��S�X+˖�W���E*��ٱzg;���:35G9*�����H�~����F��=-����j�'���ҟo�@Q�68n%0L�墯���j�l��S[m���a�#֑-�Mt�M6E���'�'}�%�{\��˼_�P��1�ٸ*%ݷD�R0�E`a�$�J�"��0�� �����R(4"�' �q` ��fJ�hɠ�J� ^ ���Qa9!(eQ�.��఼T � ����]�� �p�&��L^X�8��`���q��pt��mfkea�7��1&'LA$��#rM0[�^i�����*P��j�+d�;���鳟!��������K��D��9�}��䣰�͏c��Z���O&�.a�^�n���8�J6ֆ�Gs xY��8�� |�gF�:�_�r� R��}Wi�X:��&(`7� '��P�\����\j���t�����a����q��t��Y���Ya^4::נn�1nv�ݶiy�OR����(�@S'��3��i!��g� Ѵ�ց�SC1Y<���o2+H�d���?39�d���zi�F-�\J�� D~�������@��]#�%�V��z$��O�q ��6�P׆C��1�V�$ি$��@>���nm߽�B�Y���u^�UpB�4�K>cx QP���e�N���̱P�r@�<b KЪ���L����|��BC:��"��)H�c�"���0m�Ӣ3�\��j3Q���q��Sj�èLh�j�ǜMʹ䄾w�c����1a�iW���)^Q��HܕCQGD�G���|9A��6�]0�lj��=��dC�ˠ�����=[�"���z��R�9&��[�hs;�\��kۦ#�}j��u�R,CE_�����I�*��%2�ie�M��Z�5�X�]-W֑���r��.�wEa�kJ:���T��IF1�?|�%_����$��1]�GL�2<Lf.I.�Q�L�n�Cw�v�N _]@ ��dJ�|m�pS+g4!�!�>` ����k��X)���5��G�D���>��%��pĬyuw��U�^l��`�Yg���_dȊ���ٳ�Q�僒g����_��*L�?~v6G('�e��Iv�Lt��4�$�j��])�U�T�ע��"$�</�ŔQ��(c�M���H:�~���r�(��3 ���@k�Te���VU��LI�k��@=���TZYK��<D'�hި<��)*���<�� ���K$�ؗ�%�c�oW� *T���S�|;Z��pf����6з1��4��5-=��W^�Қ��g-t p��D���$������؇��"N�3wϐ�4�JD�k��Y~{����} 2�T֫���4���F�����_ F���v�c�a<WUr����6��1J��!�P�|�;hi($�G��=i���̈́�NφdUtQ��E����O}��5�xN3��vC}��f�f(�v�����G��S����<�"2l;�%I��w�����F(�6'����)a.���������Ɖ����aU�Z+�����UT�G�J��J���j>��} ��I.�nj���Զ��/`?egx�R.�����лJ���d�>� �� x /����Ѵ&����q�C�O'�w2 C��Dٿ���+ɹ'?���>!Yמ�����u�B��G�Ϫ�]N��$�*|�ng�gL}�لh���n�d���Q�K�����_��9oɳ���bz�s:$}��H�0@�;���Q���C$�>��l�8�-du4� �[�,c��������2�f&B���Ŝ�xb-�)��Je��[��1k $�l�(�����4s��>&J���iU�@Ɉ/�.&Rgj��Ԫ�K��İ�$r�. �ĸRg&����B��)�``����rο������\Q}�~f���]��������"Z1�R�Nk_'lH������gAڰ�\%���8D�]�D�jz�4ƶ���ٟ��Q̨V�����vjՌF�au;Ѳ�Hyena�&��Y]��`1��[)�]=D�(�����=��Q��_1���Lf���m����c�i ��s�B1$�*���=n�~R��� 2���\��3D��!�t ֱ�h� �&�&�?����� 3ҏ�ȳ&�z�y�Z'�?�� �P,'o�:��T�8�����X"t9^f$=e�O�b��o�vN��L ��+'�EX%��tV�/�v-�&�%�(s�X����6O������o�9M�t��F�aWKQ1R]�r��F�e�>ɾ��F��Z3� K� F`�X���F}�l����g�`��!U����K�MJ��-�=���V����C�iZ����Ź��01�����<V[%_P��䮆j��t��+����Z��:��T- �K�p,��6��P�f�(���]�u1bih�B�b)s8�@VD�z��őY�#oM�8�q �j:eT�g�O�_��[:�� Ź�!�6@Z�uD���;�b����{���� �����W/;\���w�a�7O�˔��-�tz'�n��H��똚�����ۦ��)�g����
Static task
static1
Behavioral task
behavioral1
Sample
5f52f19e72c19ff9b191d767629626fa81fc05d299fa7aa8d4ffff8505ebda1e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5f52f19e72c19ff9b191d767629626fa81fc05d299fa7aa8d4ffff8505ebda1e.exe
Resource
win10v2004-20240802-en
General
-
Target
5f52f19e72c19ff9b191d767629626fa81fc05d299fa7aa8d4ffff8505ebda1e
-
Size
2.2MB
-
MD5
bd9dc9c585bb0724fafe8cb1c0cedef1
-
SHA1
d415cc5ec25b90349a9193887b742e3b7f0c4a05
-
SHA256
5f52f19e72c19ff9b191d767629626fa81fc05d299fa7aa8d4ffff8505ebda1e
-
SHA512
0d8e3d8d3cb90a6eb4838ba80ee57c20e3a67a7708a73a6f177a19a0ce0e9873b6bed1c0e192a88c28e02b5735b964e19a0b373f1f6fba1a0b0186d4bc06f3fc
-
SSDEEP
49152:10SM599vPZyw9SkiIXPGdPIZzWAVXWkIP9lePowulUloEJTwsrsY:10Z99sw9RXaP8WMX3q+oxas
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f52f19e72c19ff9b191d767629626fa81fc05d299fa7aa8d4ffff8505ebda1e
Files
-
5f52f19e72c19ff9b191d767629626fa81fc05d299fa7aa8d4ffff8505ebda1e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE