�®��~f���%{�]�)xy�g��&�A��:�(��i;"(��3� �Mc�zJF����U'��HC0�S�E�][N�d�O]v�B:����_����X7�ܱ����J#>y`����������d��A@}�w���Y�N�(n<Fm��?�J*;4�p�+l@��&lH��\Ձ]��/�"Jk! IVcsS��K��` ��ή�1F�fd]�y�ZE�l�_�[9�m��g驻��3�p��e�L��]�@IR�:�f�����%[?��y�JO|3��Ujep�Zt�&J����������?h��>������{E��g)ӧ�T;�v0����*`-��۞��d}��dnp��)#pTr���!�ҽJg���_�����{�?S5r�>�iTFsI��H�Hy|�]��G�@���$�s�c%�m�4���&��� .��I�������j�a�|�<⏳�'$��䭮�r�ă_�7�:^��i?桔o �����h�Z�n&c����V�Ur�c��̑Dž��f�ao<� e0�SD�͡��S�����z�;jJƍ����X��H���r F�_�tc������^ ��g$s�H#���%���i%�`��}?"Г��7���f��PS|�D˺G����s"ƻ����L���P��� P�ݿ1��l���6����?6�o*N3;|�k���w�P]P�>Aʼ�B$��F����?�"b�߹% �E�g&�$$�;BV}�g�<��T8��[�"e����ևw���Ѣ�����S�4Kv+#x��PS|)KQ�X���dĜJ�'G��R��k$�H����u�\$����u�c悘�0s��t� ����m�?���%/ng/�1Һ�`ㅡq�:u�a�6��Pk�St���t����B������.Ć\�V(��Ǹ)�OFY��9"�T���&�oDN$j-���c����Z���sNs ��c��`�ٷg�����q���z{�_7��ElsE7� �c��h��ߨ�̓#f"��G�+m+a/=y�:�P�H_J+H#��ç�,�w�y��(�>����7 �ԓ��w�N�-LE���@048��V��"6ɣ��+uC�p9H�!�jШy�7�}Y�L��̤�iʼn��@�1�}�`N�����Oh���b�� �b�o�D�NV������T��vr���t�8Z8R(SG�z��}X@,�K�0�ؽ%�Fp4u�GL��]k��Gbc�� ����=�+�M�(���f��y�:��vG[�K��[���*�+P�pm�ȳ��&�p��U6���tw4BLU>��7���k�@����Ԩ(G��i��������B"a���T3��R�;�㛯�����C)����ah!��p���4�C�.�'���70+���9��{^Sp�H���oyp�p.�a�>�O�7��8S�%�h�t/���<���}���#��d�`+�0���^4K��LU�l<�bn���L�g�)��K���*V���oWr�.��~u�7Ő �3{Ѥ�{�t��z6�|h�����Ѽ�]�n��Ƿ�uf������7�����hh=���2?��Ƃ�3Ƶ5��h�r� �=�]n��v����W� exQuE������Z^~ɯ�'�fѝ�a�,$�=A�6�bt�U��7_L/{��R��1�^5�oA�*�*��Lc/W������X8͋.�/|[c�pg�u�_K?>Y����F�|�*��Ÿ#kD��>:%��⠐���=��%x�+n@�5�>���Q���9�Iwc!T�\��w1�6��C��+���� �����`����&���?-���Оf6aQ���t���9$� 涝w�;��zm�cZw�֤�Qne2��.�%���Q0lH��Xݭ�d�k-���eM"�yF���"�I��6*!�mg_���1q¯Ž톿M��5T�"�~�����.O>��t��=,|]<[Ш);��?Ă��5np�Br��:c�yhy�2�`/�`k��8��\<�G�E�(�Z>�%v�5sh&��!y��Ii�3T����;���_5g~���B�@LΚ��qŮ=���z�2}źE��j�����Zp{��HM�U�<�����oҥ)X�8 ��DM���8�qm�Jr�h�S&98/[����Z#�Mh�y�܁����ec)����K���f_ ����\��iF���by��y~�2Π���e�%�I&X�<�T��Q+����)1z�Ss�[ җ�,�`��Y\;���hZ �2������ 9Wz��,[������D8.�@+�2��ee��e��$5�<�~k�A���{NH(C�H��q�h����yGQ l4��'#~G��5-l���PA&�@v;xP��%m}�7���E�j�;�8��կ����s��Hs���#s��T<T".,s������i!���ț`����W����B��i5A��~ �(��R�1����O���rv�lf�l��%✁�[G�����*��r� ec��qQ�[�t� �p3'�"�^=a>��^���^�R�ؒx:Vg!�tP���d1u�UF(�r�9��^Unf�`��S4�Z�(V��SD���2{8�~S�q��¼5xS��Rb��Ғ4�{��f��yҶ��_�*8'���XP�Z�\���*���%f%0�ja<��V/Y9H}2��I�=z���R�������@�mղ2�w�9v��2�-|�$MrRvj���"���=���B6�U l6�P�����8ƌjl�7A�����c�T��#���s|���j�yh��>�{O%�q��P�jZi���d� �m��^a���k�WE@������ȁn������#fbDZx��I�]�������Pֺ�!�<�xO������q�F�G@�W.�������y����/�)Q���S���eP��ןl�<������!����M��]����U���k�J���T��&��b��-�e��0���i@X��u�a�D�oR�0�^d R-�)azz��VW��`�N�_�B��ç��D�c_�Ps�\d�[��q�oԬ/�#4����6br��vr�k�{j�A0�|7Y� ��W���e`y� �T��4$ (yj��mi�C�
Static task
static1
Behavioral task
behavioral1
Sample
Fluxo_Panel.exe
Resource
win10-20240404-en
General
-
Target
Fluxo_Panel.exe
-
Size
9.0MB
-
MD5
f2f6f6723ce19f8393786a25a078bd4e
-
SHA1
a7d81866d00969e9a01acd4daf0d397ebd95fb2c
-
SHA256
ff6b357234dd6ed6b03321f9e7c4962300aa244f55d3b711337db02b3524f784
-
SHA512
7ceeb4eb9363b01126443d67094368811e819b28b7c4fa54df479d1e3a9f2fbe733a00f5e689cde07af20d6f0fe16f630c4e710250db3edde7bfe6bf5797034f
-
SSDEEP
196608:MPUgyWpCfkT+Vht8DuS3g5sZSKSnEwb4s0YiJRU0S0IR:0UgzCfkyVhtUu6gmpSnBEVYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Fluxo_Panel.exe
Files
-
Fluxo_Panel.exe.exe windows:6 windows x64 arch:x64
60d316f941cadc3175c3bccceaedaf5d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetConsoleWindow
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetSystemMenu
CharUpperBuffW
advapi32
CryptEncrypt
shell32
ShellExecuteA
msvcp140
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
normaliz
IdnToAscii
wldap32
ord143
crypt32
CertFreeCertificateChain
ws2_32
recvfrom
shlwapi
PathFileExistsA
psapi
GetModuleInformation
userenv
UnloadUserProfile
ntdll
RtlVirtualUnwind
urlmon
URLDownloadToFileA
vcruntime140
__C_specific_handler
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_c_exit
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-stdio-l1-1-0
feof
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-math-l1-1-0
_dclass
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-filesystem-l1-1-0
_unlink
Exports
Exports
Sections
.text Size: - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cR$ Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.}Ww Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.N4W Size: 9.0MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ