��Ow:�Vٶ���� �i��ӻ����X�0�_�Do�ȸ*�JPu��Og�e&1�X*� P<\yp��Yř�O�:�v�˼i�� ;͕��v4�����k���n��8m�ZN��3���z�3��C�Sм�Un��~ ��c�pPZwU��6�;��_�9�<M�p�L�L�X)g(�#ҽ�5We�\/v�xk��� �%62��b߈:���I���:{u���t�"�Ĺ䢮h�%h'��Ï4O-������N��$7X���3���3����Ȣ#��w�����FQ�������k���ZZ�d�v=|U�%�"NB��5>·ޡ��0�����<��Ĵ�z�����4����L�kϖ�M���.�ed�>��,c1�"�P8�c�p�W{_8�W� ���6�t2R˥pW]�����(�����������Q��˖��9q��i�Zl��Q�n�����|[���i)���VP�Ԩ�l: L;�p�dȎ2� +�lds�`1��\|�|��<z��Lb�w��T 2��z� C�+ O� ����5D-Z8���t�٬���[�1�O���VkG��`�7�����+���K#�<�3k��p��gz�[/hf�d 6����=�{BV5�� g����3*�j���������Xy��gMG �[d-c����M���S�JS�D����!�K����Ve��2���T��BCz5��4J�#z��S�����}�����L|hn����N��f*�7�ufu��;�ӻ'FY/QK���~7 ��WFfN��R��R�rw��+��8��ۼe�����Jl#An.�J�R���ål ��/$�a@��K��x�R(�t<��K]��4,e1-�2kB=mm&-��e@�&���X�D��ֿ)�����Ò����>/�;�8�čN�}���a�xQV�� �� �8���������.�]�q�l�tn��O$�����(L�XlV3A��*�b_�-�%�N��u��*��|F���m�l8b�E2wϲ�ϛ�o�'M�fGydr��[v*ғp�f���^���:�9�0��R=�+��F-���� �J�E�yqݸ��=ܿ(L��M��]VR� ����jSY5��~��U9�$^��^�fWݙ'2n�� �%����W?kJ��nJ],��=�/�Щ�3~�7��5c�C�?�u����1>=-:C��c`"n9���I��}�{�w��`P0`�W��B��N���Gr���Q��ʚ�n%���Qo8l�V�&�P4��Ko��0����EټuU��ɐB<���b1���5��S�y��q�Kx}��j��-�Kx�'m�ɣ��z@|�T�ӹ)4�o�����i&S��@]0Y5�%��:lt>���Y��P>�Aq��'�Y!f����B3Gt��0 ��s �5�I����6�R��#J%ؖ Y聝��e�&��Җa��Yn@���vCt����R��G(k��hn���O���� �D֬�܃:щ�:���kN�w/��u^'�y9"�iPr�m��Նd���s����Z���+r䕴�q�w���$�Ƹ���H�vm�<x��+�g<w�K뛉�_o�"~T�V�pL%���':~�?�B/��X=;> !{�q���p�P�7��@�L�X��q2��7�H��/�ȔF�-�/�4�& u�"�z�����uyo oR�MS��6�1!�)3ܴw���ż%?���[G��֚Q�N��K8�87��I��CY�p���Xc+E��{D�|��J���3�B�� ����/��wΞ�i-7b���Q*��݈��el*c��ϊ?V�J;~��s]���W�'����9LMhLƮߕ�Z#��b��D1��Ҽ�;����>��䄛�����cʹ!��$ܹ�V�;�I10����(�N��"�@�v�)�(=GG,8��:�z�f�� ֢�8��=)|��ߧ�Y��x,�ȣ.�D������>�e���w��+�]�Q��������a����E t%��<w;6q�DVs�ـ�~�e��9B�nV���z^|;��!y��?���ZC~��� �/)��ˆ�llT�q���|�d��S.Ie�g7��tv��?4��C��PI���\z�aV��.�B����H~���䇣W�-,D<�@b�藪7��Nɔ���WϨ������b2��gi��5��ěG k+N��{�߭�#%�ab��B�܋g~ d��R�T� ��[Zi�ۦ�#�×7� �����q�RXd�`Y���mN�`:2?���G�t�m�r%�т 'Ց�'�)\Cjs|�D\�@jq�j�:�:'Q�YS�2��̓�LQ &�!e��$G�]P�Ȅ�,�� �UBT����+��U�!���\Ij~�l���%�Hq>��u�c�f�1�}��1�v�O����s�l�D{����x1}n;�v( />�J�+z3ow&/��=�Je�6I'��c�\+E� . �$oeR��Cd�/�c �4��|/(�t��Y�4:H p}F²�]��J�C=��P�aR��=���о�� ��q�X2�`�Q�8o�qیU��g�v��ǝk�'=��p����0~�{"�MDuZ4,�u�#��3��x},�A�4H$d`���69l#�D0�d�ݼ�v�_ �HF`� #��T��:��4>1�����~���P.��lr��ˈ=�i�`<��Ƀm���H*|;W�����B"��́?�S��G�V[_ke o�q���߉�a��L�{r=�Oh<�J���7\\���(t��5�c<iW�WA�5HP�������ԓ"8r�y����;7U�������P��"Mbʶ�ps�ro�&v����WB��������J���6���"��|�6U/�5��i�B.j�:҄��� Q�F0:x��AJ�襏�q/ ��?�-��(K4.��5���Ū]ёc[F<ީ����T:�ЕqYK�M��*br����~ ��%i��?g.^�)d6�Ŏ�)�Y>Dy��lJ��5.�n)�[-;��� �@y-�� UJz��}�iK�N���:T��-h�E���T��$�Z(����(X�D��d�|��Q��),Q� �,<M$�o�E�+%߶�9�C,"~�6���P� #�����zzp,k�~rt1&���0*w����S���Y�p��f�S WA���z��&"� �ekS枔��@3P�hp�0K�_]�l� ��t~J�����G�t�Ϳ�o! ���>�;��<q��E���\䩼t��S��
Static task
static1
General
-
Target
AimSharp_1.0.4.0.exe
-
Size
6.1MB
-
MD5
63caa5568e7a25ed25d3c1c8144b732e
-
SHA1
9f08fedca7f03f8fc2cf93566ecda702a69bc053
-
SHA256
27b7a9fa87edf7ed806717de1a41356ac6a7d72be9d8580646aa6cfdb2c60bed
-
SHA512
f5daa5c97043f28d9c510a5d6c28be53a10905fad5fc389cfd862b235e6608047015991c3682a2db7e2deeb162db203576d3dacf282f1d37ef0490947c2f3a1f
-
SSDEEP
98304:XwnBlMyzTE1PP1A8ErgvYZpwfgakMxnx5geBNS/wg/43OJKA6yPcZCriD:XaMLP+rKYZpwfj0sNdVOcAXPct
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AimSharp_1.0.4.0.exe
Files
-
AimSharp_1.0.4.0.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 273KB - Virtual size: 10.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE