_5��x�Դ��q��1�j�Q �R(VVm�ٵ�z`b?Y89�!+o���F�LyX�悉Y3?�O�iD<`�-�[I�kI%�������,��8o�_k�w��O�sߐ�v��Z|Ԡ���ȟ[�za���sY�/gޘ|��*�FHC�J���L�%�W����k�m�x�&�5�Lz��ÁeZ�;��Ps?��a�1u,x\��?m�Oz~��W�a+xX�tz�� �\(������%g+sI(BEt���0<X%^v:-q�5����*��x�s����c���獗�8�8�y�����$�P�p�W��i�H߱UGִ�[��@͋�:"��3��F1E<p����-�]Zm�0H��%{ �������w�4c��ܣ����N�=��6�\$?� �^� OF�8��1�BMx��6W��pZLԵ���_��WB�[���5�R��P�)�p���Z�j��6�[/\�ZU��Ԋ,K�{N0 �*t��Zg�qQ���,k@ϙ��3��B��X���u����h6�T8#����F���w#f89�u�p1�v�N��=N�����Eԙ��2��cզ�L��>vb��j�l��}pI�ovs� �{5<b@��$2?��#���n�D�%�x�`����S�r�gg�I^��f�ίq"�J_�8"�v����̾m�M����#�䆑c�('�[��՛�<��ω��U�6)���S<!)| ���ꭥ[K�t��u��d�h3�ưG�xkf���_|uCj�x�J� z�!a� ��o#��?���u.c����(��`B������:2o&r`�7G��sB�/:~�� �F_Dx���%��]��\��M��[ 1ߔ�y�ð;���k������J�X57o&=-E{�0ҝ��p�$��.��p��̮��㾩�',40��:nn�Ŝ�:��g��s%+^\rѺ�LqP�}�k��D�:.�|{���3�>�H�D|�mŚ�cEz��o�?,t��c�c:(3~��P��:�[�o6,��P�jPRӉ(�h���^�G�%)��`����ZYX��q�w�ej�ihy �xl+���T��lf>[�D�#X����{j��7��E<��\M���Sʠ�$;����!O�v��c�������U�'�c>�K8G=r�O�E����5�F�� 5��A��x��ngjZM %�e���h����0�����<�R�zspAp��pťqذ�ϓM�꓃@_�ILM�Gi���*6���؏ �@Jƞ�<��� �ULU̐���PTc*[��o%�lIf �-k����;���6�v�Mj��Uޑ~&�&���h[��l��c��2E㡼���;��܄���䂯9�K�s�����=���'C%l�����"4�u��Ǽ�7�1�x+�8�����{E��9*A����<1z92������[�+�,�K��)Y܍�o��o�xw��T�������g�:�?��lM� �%J1��- �����N�g�ޕ����k�ٍ���3�u�����x���k�v� ��� l�:�V2���ټ"��+����QO��0�p�����Mn2}`�����e��DB�O�8Uc�>�S\m1�d=z�B��V��9���@Q�2�AX�˚�Z���� �Qѱ��>�l��7��(,B�ۆ��ABJ*�z�:f7�� ��D��w�f�r-W;�Cϯ<�}������ XOT�_/��9Lz��U�/as���=���e(��~+_�� Yʢ�w�ʐ�W&��g�F�*1n�)ǂ[U�8�'�Ƣ����s�����Px���3`;�@A�^�e��ɞ�[��Z�<nFj��t{f�^aVK�eLv,�����[5�}5���_(0���7݇�(���t��7�~�"zM�1�6np)���w&�/�����Û��i���������@��Z`I��Iɨ��Ȟ5�Fah��:˓�ې$J��A�5y_��qeb���_>��,��+9��dY�����J�'[s��c�MP �s�R���7�3��&4��4<@��¡�f�ж�̹HD������ap��h�w�e��Mk��xU��\|E���t2�I?���P�Ly��,��J�����`�(�c����L6��LX ����y��eX�[�eZ˵w����Y�Cp�L�;�v�&\�I@؍>E�n]��[�����->%p�5�b|�v�< �NCq��Yh�8g#���ly�jF���(Z'�zK���C��ȤK0Gq���"��!O�v��J�[�>&ig��B���"\XBO�����v1K@a�s2c������{���p�L�����)��J�U��~S�Gn���'�-�r1nؖΔ� ^����Ͱ�(���:Z�l��۹S� ֕#���濊��3rL������!-���r�]j���@���8�+����:)aKZ���٩ƭ?Ӑ���7�u���ӫ4��[�[����x�x~M�9M�-Hg�t?8�s�/<M����eY�IH�3�'Ki ��A�>T0&� y�iD&��ka{���Pc���;���J�;ȿ&��1�����%�ޔ=J4f�tt�b���J�,�O�N�1��[�犯5i��+A�X� �C�O*�S^�/�N�8�N�c�$�NO/ߕ����(�8G�����:,hN_>V��t9S*���S1��w4G��5_���=���ww�;��J��Z�P`~�-���=�v��������,��D���Ji��+�^:f����R����;��_2�B��w�c�푎J7)��"�O���|[��c��CA� �����sy�L4�N�g����b]5TEX(��b��v���މ�֨ɈZ6�s����r��|�x���i\ۺMr� !��x0�������%��b�UM_(W���"=��.��T|�0�=�� �0A$�p�!�|]�6�V���}���+���6iwh,-$h���S5(6KJl3�8cz�>%�Ȳ�}" I�-Z\��թ��Ȯ2G9a-���f��4v����Bh@�1�7���U�v�����#]�>�*x��l�N㿈�%c��E3Wzހ:���,�ҧ�[�a�q��_�r�P#���'v���Rʚ� XzyT9�{�69��'�e��>.�Ԛ����#u�R�����4��/醜�Z� ��ɍ��h�(V��䢈$iݘ��V�G�S(9�XRp0]k�L�m ������AX�2���=���'��OǤ�����I��7�4T�9j�*�O�O"�Nr7�cŵ�.���~ϒp/5˅���������$`�@��̐]b��,�����@�S ���|WP�J2��If��F(���������^�]T0�_U�6���\� �I��T':�ɑ�����ʽ�s�����Mw���8ne�����l�_�v<�����I �%�i�
Static task
static1
Behavioral task
behavioral1
Sample
51e65ab055b0fe3ba3499945922c9753a8dfaf48fbb6cd77bb88b696d7f1a9a7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
51e65ab055b0fe3ba3499945922c9753a8dfaf48fbb6cd77bb88b696d7f1a9a7.exe
Resource
win10v2004-20240802-en
General
-
Target
51e65ab055b0fe3ba3499945922c9753a8dfaf48fbb6cd77bb88b696d7f1a9a7
-
Size
4.3MB
-
MD5
b8d752c5540d0f53a6ed3f01cbffbf8b
-
SHA1
c3772f4a95f7f53e1237197587347219926d0cea
-
SHA256
51e65ab055b0fe3ba3499945922c9753a8dfaf48fbb6cd77bb88b696d7f1a9a7
-
SHA512
cb4e31246cdd508c97a80df4cd250fd15cc1938f63a7992d1ab3fdf26ea3071834f09787d57d52b2dcebe8849139352edbae4be2eadc6ffe6548f5c1df74dd1b
-
SSDEEP
98304:i3viILEpMDhdGZjRprW47ORG8jkQZJ1RQQhtHh9zU/aesgcs:i3vlgpMldGZj644jkQZRLtHDzi5z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51e65ab055b0fe3ba3499945922c9753a8dfaf48fbb6cd77bb88b696d7f1a9a7
Files
-
51e65ab055b0fe3ba3499945922c9753a8dfaf48fbb6cd77bb88b696d7f1a9a7.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 592KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE