�����S(�'Yx����ׂ�=��\W���:�e��%�E9�ӑSG��6[���m��=n|O ��J��ب:ث��p;_��/���8�N��_3��Xk����C_T���:0���C�6�R��T(���a���E���"���]8R:�; 6���(���M8�ۈ��@s�F`CML�hc�M�9�e��L���������*��'�a�"-6T�d!�mry&��{@�12rU;_4R��IDNW7���=d��>AZ۞.-@T��,���-I~:�:ΌckGF�=.`���M�϶���F� L�ȑ��P�M��;/=?R/� �l`f�=�Q,#NW��4�L��Q�+�5�Ꚃf�^4FFAh�<�h�Zs�f�Kǔo��sǨގ�SI�!��Q>���t�G?�%�9��|��"d|Rپ�c���Y��R�TEY.|f#̅�}�\VcDM��U���^�B�t�����7�)�o����ງ-t2�]�:���A�=8�\L�P��h��;��->���Lx��/���\�A ubқjY����$���I 9�&FՉ��tl.,��G'��^f��J{�2�ݧ/ˀ ��l�!$3�|'��t}���c<�c5sQ��o��:��_��o̱),?��%blK�����_jB_i ���0K7ڏɨsr���Fi5e�@�l.��k�r��oc����BB9I|6�f@T:p � B��̱ @�xVkc�TS?m�B��+���-���o�a�I5�`�����5��I�rAk��pbA�r��.N� p��KitZ�#�~]�����)��Ŏ���;>�����E���Eu�={����*6X*B�Ƃ��� �t�i a����x83 2��`,��r�E��k�5; ���8n��H��b�/�κY����!��H�űfU��� �/�[Z���[�=�SمE���������X�j��}���QAt�)�N��c�i�� D6��#I.{^��/�3Ϩ�m��y�����<͋zz�ӛoH�&�N�F��u�|��j���� }�M{�HН �F=ö��~\X�B�u5�c=�]���7"�m�DI�n��A�O�b�������5�*���u!.Ҿ����.mLq��i�����-P7��'���I�1P�I�CɅ��\�B�h�C��ђ�� {ڹ��묣/�0�]�ʷ)�'7��xCO�/��L�Z*$е�ڔ�j���h�88��_>�+��xf��j�5� k���;x��e�潲�Dyy6;�&-��~��hZ�o�k4�gG�ZED��c%y\]F��N�����6�b�w���*��-��д+q�Y���^�:����ţH�&�)������1�9��0#�lOY�*Sr��N�� %=��rH��k̜#���`ya��T���{�߾v�|PL����0��|���`|^��p��� ��� �T4�H�%t,�'6T(�Õy �� u��� ��k�C�sJpV���A���,e;�Ѿa���^����z��|VS!�V��1��A>H��=u< k�W&-^j������<vİA�zƜ�Z���6d���/I�� �y��)�������'��Bt�h�x�O�_��c���GE�͋�q��2��ꄒ�b\�[C��W>�Yo�?�"<�F�u��qO�D�F�z}�d�Y�X�V�P<�'AMDE6�fZ�f�x!����p�ݥQ�*4�$�2��b�n�^��9/I9�v�����<N.ː��5i��������w����>n� ��Z(�=��dt1��/������"֤��7�X���l�W;.k[ _eȄ!p2����!�U�g���'t�6l_��:��4������db2��d���t.(��Ųv���/ò�F�Cse�l��Y`�V��xQ�0�.�"����S��b�Y�#��2�:0��inW�<EK�3������|iڣe+�捡LZ��Rdd��.���c �ntR��������P���yW��2��[��l�Y�.��1���d�aZ�����:Kq6��l�Doc���h)/NQT�diA����@.���+����xPr#Y�ck�E���������%��`�q0�SN��?� a��K>���H�=�.��֠>vT�%�V�ͳT�� [���<q��^�r�ʓ���Yp����ߢ�'�?y�z[����RV��/zJ�����3��˸�:�Ծ��, 5H�?ʗ_���jg��\��+�~ן���\H����W��:�����I��U� ,�V�i������#�-b��g wJ�],D�����"��~[���)����T3ox�R�ۄ�?�Wd>�WV�吳�X���6�3e�B��#|��D?��Q�h�I�D���܉-�&D�?�BKc���̇�!f��>�\����_�fDz�������A�M_�������E&:�zQ�Z.�5�=Yu4��ɬ@nIa��b��:�����<ދ�_i{�M����)�<�1=!"� 饬sԮp��43Hrw�z�j�"Tc��;(T���%�x�I�<NU�a�"��WN��������_��l ^rιt�����9�V��R*��)��M� 7��6�P7$u�ަ�c�k������d*^��t�O��?��n�E���blܗX!���B��ªD�����,xl/Q {���c�{�3O1�Nצ`LX��' ���斛W| h9Áeu���0IB/� $�[�^��[Vx�t�f����_������_�>�i0��B� ]�VWJT�N���b�&�ɥ�Q��|� �ۦ1��9*�̾T�����q"�q�@�^��IR#�}+@D^�Q�I��%�%6_�7-���uh��=Y�� ���2�������.w��o��=�L���-�8�cS�H*��/��E榻�aQ-S�t�[ZQ�o�)�)n���!'0m"���y�D��}��t�\}�4O�pY�On�B������t'*�ӓ$�h���3�d6����f�:i���t�?��0Kw�3�^(������/}��W�ʝ�^�g<��)��Ci��8�]K�
Resubmissions
25-08-2024 00:52
240825-a8anpsyhra 7Static task
static1
General
-
Target
Loader.rar
-
Size
17.8MB
-
MD5
ac733df5c243df5d68d25dfa21bd6801
-
SHA1
85fd12b5bc5273c8279f55a885c7720b37570356
-
SHA256
efa311b86c4458bc6adfc1c84403b9336ab288e674712ca792289454e27f1069
-
SHA512
97f155af86b328ee197aa9d41079139cf26ad7e8f5d7c45afce094322acb520dc56942d4db1ab4f8548a2c5d9ff6c12f7751901a4125197137dffbde592b8847
-
SSDEEP
393216:luQ/HLQCePDnRl/bTGy4Ec+YtxBgexLgN/GJ2YZiprk09qRq7j+:DvEj7z354EFYtUexLgN/AZiph997i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Loader.exe
Files
-
Loader.rar.rar
Password: spectrum
-
Loader.exe.exe windows:6 windows x86 arch:x86
Password: spectrum
123e80f9f733d72fdf9608fdd40d81bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
crypt32
CertOpenSystemStoreW
kernel32
GlobalLock
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CloseClipboard
CharUpperBuffW
advapi32
CryptDestroyHash
oleaut32
SysFreeString
ws2_32
WSARecv
d3d11
D3D11CreateDeviceAndSwapChain
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
d3dcompiler_43
D3DCompile
ntdll
ZwRaiseHardError
imm32
ImmReleaseContext
Exports
Exports
Sections
.text Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spec0 Size: - Virtual size: 13.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.spec1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spec2 Size: 18.0MB - Virtual size: 18.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ