�/���z�٭~�&�Ʈ�}��Z@ �1�����Ea�كf����Ǯ02vtR�����?,�x�����Xu��r�������̹����;��V�L�)!��ϯ^���\6�/��ۊN���E�{��3Y��jyp��f���`�:y��+_+��O�`<W��ޱ�}�4�l��ɇ���T�s�1�&���P�QhX�%�?HǼ5)p��u8wb�Z6��A "�1�����1��y�$����L�y��� �H���<R��#P\ns�����)r�#/�]��k��ܰ��\S ��p�]ނ��۸wU��~s�B�ں�~���~Y��KYS�4f�s�=�wU��+���Q�jyZ�m.э��t��q~��{4s��E����G!��5nM)A�r�6��MG�dB�j��4��D+�A��H���+i���l������b�[)�5��f�B.�2�� ��}`�{@^H�8��}��1�j>�$��X���} rbv��*Z.j������<^�J�K��p��G�N�K�(*�H��nb��7%.Y��(�f)8�zd��s���B4T���@-��%9�X�� �1]'��ݗ��9>�c�h~�q|�p?5��"��p$_����/��;�Ԟ .�H���Y̷xqv�Ё3��4���Uν��!D��&�<|]<����B,�O�Kw�:��s��N�E�a���r$hf�&b��bN*����\�}��]����1�܉��ny]1�+x�j�N�_�}���#��w�n��������Z/c��l�����nq��2ș@��Pt��s����gu�1|��B�I���Qa�S��Pe�ɳ���:�����$����T\��:�"�3��͡�eDc)�n�F�4���5��/��M w�q���t�Y��,>����7>۟�� ���F��p|���C��Y�kԾ�>ą��Y��:��Y�:��}�Z��s����;b��ߨ�|_�XnY�b�8p6�yX�&?X�TK�����Y�Jr���Zn��n?b��������~8���+X�wt����q��SO���\cOx��t���H�y�e����[�鐴���1\;�����` +����c��F�;�=�� �� 1$ �� iL���R����l���PӠ�t��1?J;m! Z�N�`�szNѹ��`�� �h�׃��Õ;�fַ�H�/�*�$�BZ�8�z�]GB��4R�>��_c8�te=���I���7�'ڞ�Rjx��B���3Ӏ��P�Mls���i��d�â&������O�;�y�<������6"�q��Cg�W��d��$9�`(�Qd���7:i�ǣYqo�]c=��i�����Ȗb߰H���!�Pm1�5)��:���~�O�eU�רe{Qg��"�P]�-m��K�E��Y���^��.�p�"�a�C��i��b'`�@e`7(�����t'�p8�����aN0���P� h�&ͻ�u��"�� �M����/;9zh�GBZ�� ��@~*+E'�N�l���������8$�M�����,N�Ӽ��#Aط#G70�X�@��#��!a����Kx�˩��?����<=%fxHd�3 g��ٛ�2\f���� %��;����QB��J�����뇤v~�'���@�S�R�K����){S/�V�m�9�('�\��'C���O24uɠ�:����1��9%�k�U�3A42S������ I,Ѝ�G6����r��������JY��e�Qi��鸤p��]���>������W��i�gh�L%��1D1����p/`Mek��8j��(^g�EB��rVO���'��AS�m���T�@�w6d�4�e���Cgٗ�!h�\�!a�3����*n�n��M�m�R�@�ۡ�} ��O?K����ao����U-�f��{tV��%���ǨLő�$d��1���E�P�����à��-���lIGio3? �M8��"~��<�V�k�r ���%�Y�������?�{�q@N̩R"��p�o�y�!�p��?V�X�����:^����< ކ��L��i��וj5���BKfcA��5U3��AS�%�7u�m�,��(���kRKY�����;�[��W`YjF��}9� 1@��7EE�#)�.�eHs��Yia��ݧ�콒4�Em����>� ��S�k�f�������C��F~�'���|*��(6�>g�Pt`o*dA�ݦ�E���h^�۞p��=�r��A�~���&`��ٔ�7 ���>��g�� ^���u�xM�}��e]`���<a��k����݇'�Qc*��R��5g^<�{�qpC�/k)��AN�>����}�X�� M���̨�k���`�c=p����V�����d����mO�I�Zȕ��|��?�|���d�#G~��-F�\��+�laj[؉� �[�%�!�.�|wN E��7<��'�z�49�;�8�/�"F�*xΓgΦ,���f�B�Y�[G�.� �A��g?���[� �Х��5��V�Q��@�Zf@�#K�E�֭��� �~˼+W+��t����P������:�UJ� ���9^��:t�p߳�k4��le6[`�r��y���l��<��t�}:�_VI-�MX�M�~���إu���g���/�� �k�����v1_��&Y�ܙW� �TB[����N�gr̫t�Ĩ�s�;yw^��� nbUD�yO��~��{�lk.�����.H�^�g�t����b��#M�R��-���6���n�-�����I+O�p�BRD�0���(]�U���k;}�c���v=,X��)Q-rwg�=^���̿̇,��6(�^�^�vs���;_U��� C��넡�?��M����X�0aω���zL"�@��h&�i�i��<��f̒�l�{_�*o����T�WB6h��Ƃ�!0F㠦�`�h���2ˉq$�L��v��>C�T���f�%��p7�{/p�Vج��k��1�\ٍ�������ғ��%�rL���Ǭ����� ��%��ILF�D�R����y��z����(2�m�Ԥ��{�W�ҽ�����ls�d�W�Er�a�ܩHy�w������d~�+͌%����7k��!a^�z���h|3��p�����
Static task
static1
Behavioral task
behavioral1
Sample
00adbe1f069da7ab778158bf59f79e9713ff08e91b0399bc29055568e89659b5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
00adbe1f069da7ab778158bf59f79e9713ff08e91b0399bc29055568e89659b5.exe
Resource
win10v2004-20220812-en
General
-
Target
00adbe1f069da7ab778158bf59f79e9713ff08e91b0399bc29055568e89659b5
-
Size
1.6MB
-
MD5
b4dd76b4543b197c7f2e1acf12e568c5
-
SHA1
9c93bd98504852178922ffc113dff1fd83fbb648
-
SHA256
00adbe1f069da7ab778158bf59f79e9713ff08e91b0399bc29055568e89659b5
-
SHA512
e5f1b53b48bb88b3398832d2bfbe367ee692337c0f7da2e0b57f0d980367baf02d697b915e9701fa7364b8cecca2a0e41f9a82bd33d5870a62fcb2d8b661c68f
-
SSDEEP
24576:REvV3TY1nMaFFy6v08PJcTsoL875rGewVjKq+L3D9vvOTXovxXAoHoOP/UPo8kKq:6WMaGccTrBTVjgRvOTXovxwSUPo8d
Malware Config
Signatures
Files
-
00adbe1f069da7ab778158bf59f79e9713ff08e91b0399bc29055568e89659b5.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 505KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 166KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 836KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE