����0X3�J��zÛ��,Fc1�uK�u����F���+���(�8}�Đ��x߷d(�\��aa�8�,xqSFظ��(Ř��u/z���u���(��8� �͞���?X�wA�(T��J�+�+d�G*е��t��}O�i�\lU��OY���O(|mB@.%Ґ@�Ц�koI��G'�kh��/it^�J����#�����F.��Oc';rG��ߖ�N6���rig�������u�r�2�#u. ����'G/s�*IӁ��D)&�anp�8�� Ǽ��V�� �]?��R��R�C��^&Z@��{՜�X�nP��!�ڦD�����0F��?��x��\߶�������oƏ?h�:<� ��t:���4�Ȼ�u�ar�?�%8����{���8��oqBa��X�0�-������#����N��^��M�; ��E�?�cvN�7ց��y���u��X�����)��p��"���AEnt�H>�gf���'�o��Fl7�]��f��.�n+��q/T4���N{��T$�+�����1��l�pZ�i��˘�}M����#�έ���m�>��r�*��{��zb���;G�%�O��nɿ,va�/���+ \�y��q�H����(���pC�Nj���7IU�X��q���M~�oW0[�2����q)_�O߾m!AhW�w����=1V�ˤ�ӌa�g���;n�s�/[Yߐ#ѻ���<�4�ƻx�ɢ�-5uz�5WA�''��/��rA�P� �~�^���Ŵ����H���ƊG��<�Q�G�$�AԿ�0���q�4��M ��.Ӄh�Gc�BQ�\� Ʋ�K\'X~��U �o�z:ߎMa1��G��O�ݤvY�DlЎEU�A��>ą���z@[9%'�&RI>vO�4y��>��E&3A�]/G�d$�����w�Z��k|t�$�A�$� �H:0��/�س���� �U�E�|���X�E��m��:m8$��r��-�����z�Sa�U��&�xhp����J9�nLU�k�����)���e1���A�O�N�uO�c��.�#�C�B�Qz杻�g��Q��@Gx�*��j�.�HN�sc+�ć �c�f���Q���_Ih{�d��������;��H�}��~.+���+ Ёy�_�[�q��7Vt��O�^g�Wx&����U����E �����7ɤ .}��� �����m tS� ]�Ⱦ%�σQYd2�ÄP4X�~��㿴��]��|J�s(~�e�i��\�#AG���-� }T��2��c[��j\��Ԝ��������^�>�y�m�]��(D����&ъ k e�s�2,�-tr C�<��B|�+yDN�WgK��z�,��`b�����(o��"�g���v^ܛ���_A��N�Z5��}��7�LN�b�$���B� �f��M�@�ޡ���E��>�3�JO&�Pş��8�f��?>0V&������a�=�����)�&b�F<=Y4/�,t.��2�C'��CO����ٳΑ �#^�i�M˖�Q6�ޭ����^n&��۾ ����߁�A�����i�K�S�����B��gXt,*��)i�{�+�<�l+�2��:1�#�(>� cD��d;h�����!�)>bNF0���W0?pJr"Y��%7�ϻ���ޑ��'&;��%V\���@3��sy�?kd�7/�������;%�T3�O�P��L��Q�G#$5�M�Zݟ���Kۂ]��Ύ��~�9ذt��|�u�u�1on3�T�T�x��������L��Jԁ�u�Ln���WՋ�y�!p�6�0*�kM/z5�T��e���}����p��硳�sY'��rG�)�J�]���"+&,��K&6�'R� �^Ǜ���t��/����+��E���58���d&8���]�Ҫ�e;��[w_id dc�O��`�v�cڪJ�OF��.��z�v���c?'��pj���EOۙl���sH�������˪>]f���r��r4!�)�� S���,��,�En����b�Q��z�(*��Rs��Cy�����i�]��)TU��ռq5i����.O[Y�D�nY�hu~�>����9���2��O�p/�w��3 �.ZD�Z̭�#���h\�FP��PZg1[�@�N��$�z}��(b�����������ٓu`F����ʀ93"N���Ñ���v�\m����&� >�����#-��ƀ�π�L�g�fuC⭢�j��eE|��>��_�����-��k/�V��$A�6ԑ����T�v�p�9������(���s�t�P�˻$w#�p��-�Ӷ*s@iZN ��������3�4�X,/Y�O�W?>^#���>�5E6�V��exoе7�B��բ�G�c��s�4��g�- �bD���)e�g��^6���@��z�2h��%�!�6U�.�|~%�=e��_Bs���N��Ľ<��{���Z@ׄ{Ƒ�� ʳ��xӎ;��^��������]zs4��*m+���oۯGGx����) ���y�5�l3$f*����;%��-��umQ˙,~PF���E`եO�h#3e�e����E��<y8˗v�L�3ß���vy�Vn���[4R�<�$���Qk�;>�j��&�r��=�{jka��|m48���{�i���,���OO�\J�`t�s�XmJӂ������B���g���q�����b�����*��с���l zX�`���25���d���B�/ RR��P�[��1k)C]��O͠H|[��1���#���MD� �N��nB�:�����t*c"�����E�� RMۧ���}w��>��1hf1��f��9��뢑�G��k{���اG�g\p�!*�!�]�}�`l��FQZ,IWE��<A�>5Ԙ���� d��]^nf�=�@���]�ס�Uy�g(,�E*E�m��Y�0�ͷd� Sͨ�q�Ы���r9u�H��j�� �/�5��~K����1����M�s�k�[��.�"Q;��hY/�g���� vm�B��4)ܾ�a�y���������ӟ�ք����I�o�*��U�D��pF5����6$pJ�����@Z��`��ȓt���YO��c���C�2�Bm��R��ݴvgXZ�8����c�nկ��3�d��}�+��>pfΩ�E�W��v�t�\�F��������JuHq���]Nq�Ey���Rл'u�&�� O�� .;'�qIvm�ը]�I�њ��U��2#b�x��3�\��/�}����fѼ��ͿŌ�Q�i�5���N��]��䬎7�&l�os�P_)��+�ﲝ����"lRu m��p<���U,�G{w��#b�~��굂1�b�x�9Ǵ� ��kx��^5�����A*�L�"_���g��t����ٙ�;�&X+��j^t��:џ��J��u�%�'���P<��6�s��|õ��C���J�u�t��:�̞_=�va%��ڥQ��'L-w��q��Q;:�*��W�����@��hϖ�H�L�i���
Static task
static1
Behavioral task
behavioral1
Sample
V.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
V.exe
Resource
win10v2004-20231215-en
General
-
Target
V.2exe
-
Size
7.3MB
-
MD5
7e6ab13e443f6953ef11a93d327d88ae
-
SHA1
ddc63c713f2739318cad2d5039509e41e432834e
-
SHA256
1d52b74a2513eccf9e4440777eaa2be1427fe97a9b6b38eaa30e1aee0ac1ba0e
-
SHA512
6cf491587f39570e14c7c7b9b9c5ce33e5bba658c61bb6a857c919716c667917b516fa288be5cab4a5f041bad6786f928f9f846f542d3c30ba9890c448ebcd11
-
SSDEEP
196608:Mc9C8F0b3A0Af+dmfmETietbjhj8FbdPcEcDdh:MchG7A0O9mETietR8FbdPcv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource V.2exe
Files
-
V.2exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 83KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 31.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE