8�V^�e�����Uv!F�E5m~�@�(��Đ�vH������fimɬj���{���*XΜ�E��p�J�Sl4�l�� s|�& R9V��gP��)7 mĉ�Jj��͂�Tn�@� ו�٘�� �8�5��;h���@@�>)����H��wq��"r�����I� 4����Z�g0��V��\�CB��'��%��|4o��?jG]�J�X��,j��ӹ�ƃ�5i�6�sZ����+��]�>Y�{��W�Rf.STC������E����C(8��T��O'B+q%�����"�vNx!�ԫ���KE�^�ű�<��P�B˨iV√�7|�i��cw�Q�Rڵ���&�o���T���9f�^�q����j0 h���R�'R�M_�/�w�9��P�26+<����L6G��l�Pv��e�� T:\0.h���UĘ����Oq?ejafbn�65\�߰�lݯ��X�ʂ-�����W.�����ֻ`t���Lj��ط�i ���:���ڣ�UTM��lcX�X�:3�wK��Ğ1���凗��:*�bu �+�Aj��}�ݯnm���{CA��k�c ��eɨdw_-�o�.8���C�9D~B}`��p�EXO�-�g(��X���.����rB5c�^ ���ꡖ�B�&0���n�8���ZC��4�ڭ��6D��9ϑ'�Ő���,���=��y<�NBo����^��#�Zڐ�rQ%>�G0{LM/c9��/T&ן{���8�rQ�>�������%?�P��F��h�S�R^8EN��H��������S&�f�j��o��nJ1���ޓ�!���;�<A�a��fC�۾�C���a�Go�r�����Sg�*Y,�`�,|\��<�0�::;��جMlA�n���1x(F6�yL�M_�YLB@������A^�{76m+���gn��g��]Һ>Ob+̜���/���,]�5B5�K>ʕ���>_�A��71ۄ�cC�m��0=�J����iy�*�Ӿ��P"X��$i�����< ��Ґ��g:�����G�#W��s<+��o>y������9��!C=���D�p�q?��=����ɎcZ�`�@�� ��V|�\ ���)qQ�j���oOf�/{����l����:�S�<����S��������'A���w���+����y&g��L r�����$����Q%���[�&�Գ�?)�fa��R$b%��>�i��8b<]��tw�CZ���AƬ�t�D�&�����B��f���X�"�㜣&��o���ޗ�y��E��N8�s��Pn8�e���g��ȧQf�Q��a�nY�u��E��vv����)�r�u�����*�_�BO�@Ɗ7�霰�����"�.�%� r� *+ V���Y����P�ʇZ#���'����P���D�A6��jAjd&ʻ�2R.��%�~ݤ&�L��d�ñ����妫��Yer@�<qc:� n����r��X��A���eT�4�<�������r��="���b Qݏ79�����Pͳ������1��Q��+�R��q�\� ��k�+���f� �;q�j>�ocGұ��'��ɏ�q���zc9p����"�Z��M=�y~�A_N\%To�m��Ҷ�7\�Gz�)1q��p&N�V��Lj�g��@J��L�����p#K��q|��Q��[5-rĺ���(\�P=�n���<"k�jT3J�g�q�����S��[�X��̈́ڙY��&�:�?�`FS����qSጎ>��\�K0�d�{�_�{��I^��k�5-iE��� ,�����a�ѵg� 2���j+���꽂�g������>���q٩.=��-�\��O���<�n�/�T��E�ʡ.���[�� �ƨ��f��d�{ j3T"9mA������<U�k͋���u�U���]�cwHeJ@����\�W�A���������܄�^yi������և�_����-Y�-~�������"1��i�G����m7@$q�A�O'�����]��0-��9`!vk�K��?r+��i�&� ���7�5��͙�j`A�n&����L�%�o_Ptn��#q>�=���悹: �����Or�cM���*W�3��vayu�& e&��1����>)M��}�8��z{?}&!}ҵ�|tR�;%>Bd�������vN�C��̴�v��CX_�]F��k��3�?�݂���r����xفٺ��˔�`m�\�<��J'ܬg�/�vn��>��hDn�EA5�r�&_�J��o⽬��*�Xԭ )�Wo[�T���`������,U�2m�� o��������'ƹY�z�ˑ��xN0E�NPNwF;o����?���Ǖ�9�|�CP)�j:�] w�i�Y�E�sE d#~�����h -��?�l�N��6����C��v3~��� ���#��n�h�V�g�Qq��^ZQ����X@L��s�3}�3\I������?.�/Z��N{,�7�����{�J��(�+��cL�9���I\�LE�����*�Q�m۟u���m���;�0|_�Ά �w��S�,]Q1҂��-;��?}K������-���R@m��g��vl�,B6iq�� ���E� ��������t�:�D �cn>��Ԡ�0H`tT�փF*n���0���-��KaV_4����<��A'\%��D3F�1��y��*u� �9�W��{��L;�(P�ei3����x�:E����%�+�3��lB��a�ek��ae��r����{�-��W���Y���2��Q���y;W~帘��ͮ�����cUm�LW�x�jR,�DKW`��*/���nB���=��dOO�����\ ����Taq;uV�t�V���#�#����-���Z��̛(�#5(�-�ܘ�T� h2r{,<>�V�<&�KQ�t��� t��7I7F\͛������DZn;z(qu�v\�؊&]{��U��n�F������&*�=�JhGu}Ji4��B2g�R��C��.(�)�BwW�����^�۴U���i�B����@l�L���B&L���P�/w����m_�MSG@��� f�� >���E|�����x�*g��i���ib3�%.*q�n������.����}� [�HZ�X�\f���=n5��� z�jٌp �ь�Zw/!/�6�!�3-�L�Jťr��,����,�<��`�Z�@��� �c��p[�w���߈�}���@#7�v��������w��eQg�����g�� HV!����6#������E�2���+Mu͝h(*1�;Mߝ~a?��)�N��%�V��b���{� �ұ��7�,z�K�#\�/�S-���*^�-&�+�R���$��%8Bo�)�X �ξ�rE�tMK �zC�P~��H�A�'�(���C�u���/����S��ֹ�tW�c�=���`~<݅�:��vH�ˈ�Kb��Y�&�aJ̅�R������&��h��G�$6:F�Wb+���D�E�aY�N��oJ�l,v,�(R�65�4��q��{k3�.k��9(�Y5��m��2�h6���;ԏ�:izɭw��4>o�7��؍�����,lu8�v�<�I��]ξz*]#�8��>Qd��&ڰ�����ϻW�_�6��>���h�H���o۱�M�W��臐�$�t�;s�m��[PJ�
Static task
static1
Behavioral task
behavioral1
Sample
valorant.exe
Resource
win10v2004-20230915-en
General
-
Target
valorant.exe
-
Size
3.3MB
-
MD5
1a82b50fc594b18f8c4e26216804d8f7
-
SHA1
1956f711f6bb33beb0a1787fd3c2ecc4818f99e8
-
SHA256
05c6dbab7f737c7a91ed865efd029bcdd383f5c5d0bc1d9f84e9d2dae1449a65
-
SHA512
4681b9780509b355eb8a5ad1fdfcc92339610d0f5786953db7d9f5c127154d102a0ef103a6208fff18108689fdd9f890e305bbd8f359024e591e96208b5151c2
-
SSDEEP
98304:jZOVVZtL19hAx3fbkVgSyUyT397xvLSsbL6qX+x:lGO3fwMUyT3JVq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource valorant.exe
Files
-
valorant.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 269KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE