z���sw��@=�q{gϱ3�2� ���`/�ek�s����?�eKHcr�݅qo�����^cK���k���E�=y�N��0�0,GR���鰶�L�'�C�,-[r�/BN!s�(p���<�e�2���wn����5�me�7z���GuaZ��&�ٻ�Ŷ[0���06�{N�;�#Z@����%xzƉ�Y� ���^y��:�$W��W)|��~�u�O��D~�qy`�mX-���_�I�w}�ʇ�'�@�k/B�����l��s���Ǝ� �L*��Z�Gf��N��bP��|\�4��dR�q�}�y�PW#��X��\G��>����9o])�\{&ǻ#��|ޑ���<"5���<���� !�lF���r듡�C+��zH�����ȴMB�f�.Uk3��_�+ =�!.X5�~� *�=BQB��'�Nߪ���arm� EP�$� ����6%G����h@_������J�m���ȕ�,뫧P �:���yl�PA��d��Wܼ����,v�i�{߰#%�V���C�l����ؾRsg�!�4cͧ�m>w �@9ϵ־���쀼I��g��2Jl�K��Ɇ���JZ�j�KrR��i!�2���nT5�t�03�p����t�̳rv��/a{���_���G�=��������V["�h#}��2C2��%����WT�҆kR}a��������jx��%n���jt��~�����?�7Q����Z�op�T�C���i�q@�!d/�v����ƻ6 ��6��j��5�'7�Րq���w��{��.�_���)0���Nz��}�zIx�C���v�VW[6�W^~��%w?����09�k����TA�JA.^Յ��@/�o2�vL�����HN�����6u �rF06�w�;c+ύŒ]�����I ��C+�{���F��x�,g�F���vx1�,��L �,`Q{���ؕu�� ��ۙb��נwA�AC���K�&4��^����h ���SV�R���8��0��9i<�63/Țk�_��<�������!Lm.�n���KhN�����;���ΐ���N�/����A?�k�9@�N�s����$e��E�S"�t�3۶��[�-}9�\���J;���Gn��Nv�-�$�,aJ�����9�v9g���EgYh ���b)�y���H$��4[��\��zn��H��P���$1��g�Y9��&z���X���=W���0d��Ov[�Z�LߵP��;�����܂�맑���z���E����G�[�ډ���8��5��jƠ�u��Q�:�M Xu���w�������9��~�?6��9,�m1�R �4ͺaH���H��O~���R��u'���1�T���@!�&�w����FY>b�����`?!7��S|Y���E~M�s��d kt��J�Dy���b���[q�jw$���as�Ŷ,���/Y/3~ P�L�hm�I�&���֖��b�=:LF�2��vA��W��&�ԑu��lX�,Hs��f���nύ�J��d2DV��Ch�hW�'��eol%QA�����G E� ڨR��F����쩹8��+��jv�M<q���;Vw-m��bL�ߟ�w��&�z��=�f�����+a =bkPFe�!�"�pH�'���Uʷ����r��n���3�)��k>�}�cJc̣����+3���4\*�-#�Hꭒ�H8�v����n:�zvlh2���>w4R@�۸� ���fN�I �V�(J,j�:����q��Đ�٣�ȳ`���г��U\%֞�d7� �4h���#��<6"�r[H���P<�=,�mc�w��Wߔ#�S��Zc)�8����#���h����SM��s�� ��I�t "�-lEg�N�\ ��08�d�^��kr{�]����_��ӧ��X:�M�B����#ff�B;���e�pj�e�f��O�8_�� �����_d<aL]ozB�|l���)`pO�j9$h���V~�9�K!�v[0?��} �gŅ�`C1�N�$<AK��^?g�7 ����,>�zE�}3�&%���E�|�ͯo���׀�&�����w��c��Z��n�Fu^h�kW���%I�c��{%��,"�Dd\�j���]����6��;|F�f�u���_k��᜕��>�P����E�o�ۼ�2N~~�Ea:��-�����L�:!z�1 �����.'�Xs$��.���Mh���S�P�W�3�7��� �X����#5���G*�`��c��A���e��:�D}r�W�R�r����q&�`2��.�b$���K訶�2�����#h�U�O0~/���e��$7�3��U况!�����W�Ga���':�g�Hy�V���8u�a�Ǟd�=>���d�ޚ�u�S�4 �>zX8o{��C��[�^d�Xi������v�Ge�ʡD�-���g�@2g���-g����� M.�g�:���?�iA/?��/� 坫���2!Q���ݽ�V����p�� L������.���������J�����nU��}�mq���qАgG���C� �ƱX�X�*f��;!/�������G�kLqg������(���P���&s���߮r*ٝ�'v$G��V�mVWр��i��̶H�E6\p�X� &9�����t�q����hr28.9��@��~�g�{����n����������L6��Y@tCC��[��S�?#j�_������W٩k�C�*[�`x̖v"���#�����T�%y6Ym��C�Snjo6髠bP���t��v� ��gge��sg#q��ܩG/�<����p��Y�+��%�2��x��o;�s���J�����핇�=Uw��f�<�H�4P=�9�Adž�NdŎ$1�����e$#J���g��L��Y"���;��� ba\檭��G�����W�����{ L&bsnG������.�<���Bj���C�IJ�X��B�v�qu�"���%�9�E�D8_^��e��r�VZz�9��1i��� q쒁RqnK�e�����9� �z�{J"}Be$�^��9EIhH����#��s���������S���0p�x�&G�/�zADz6�����o��� �66��5c�ZGkx����m(f��F IF���ۮ0>e����sU��qD�Ded�W>�����":>�D��cs��
Static task
static1
Behavioral task
behavioral1
Sample
v.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
v.exe
Resource
win10v2004-20240412-en
General
-
Target
v.exe
-
Size
2.5MB
-
MD5
71a81319ffd427bddf85bec9ae73e0c7
-
SHA1
b5110cfe3a2e82748bc808b3332e83e4aaf2badb
-
SHA256
fe6fe016e40d1607b375acdeb90895b28b7056dda29c6a58bec2fbd8d6d2756b
-
SHA512
4342eb92a3e29b5c5a68f33d2aa1395d36ada893ae4f6cc9cbebb1fe8696aed2e25ec7498f1c95ea2f1c509e9e1c46adb755aa0fe0a4642f0d4fa6a2792a1909
-
SSDEEP
49152:c/lPsvW3h7pvdzJ5OI158IbesI0nWVxbdRQB+AA9YxiA5HFoS4nsic:ct3p1zJ5B58IqsInVxd2Fl34Do
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource v.exe
Files
-
v.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 207KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 55KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 189KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqq Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE