�◣7����QB���0��Մ�y��[���&������亹z���j8�'��qTkB�~��6�*�\�~;�Ӡ��?ܪ���95�$�M|Dr.M�'���r7� 8Ū���~�V�|���U�[�NhV�D�������WÊa�E���r������8j#9�^D� �8����nC�1�++�bzq- �����Nw��u�����a�{y�$V�;�1Ws���KJ3�G"Ů��z��ښ�>؆�zM��̂��f�٩�R�5`0覑8����|�p��s��ӧe�X�\s|S���j���-r��E%��d� ���Z�V��h(n^���� �T�.���r�_��,��Ц�>s�!�'�U:XK06=8�Z�DK�õ��@��� JX2A!�q �s�L��}?�T��i�i���Y�L��,.[r���W�dA8��At�����x�|����ߢ��:q��Eoh���d�����8�Y�Y��3啈��%������c�)Þ{����F��`��[Zٳ�Ւ� 9���1B�:Wܐ����$~�$�������Gc\⨷gz|&B )������mI�j糍qƉO����G�' x%@e���<6�+M�U�� �k s�a081?�/.B��MϭC����E�<v�eZ�sh�=,�O�d؇�rHF�ﶱ*F(9��,I��y���M�r�c�g�_��ܙXΨо��|�,�2�!f!�z�|lРݹ��U�������T����|e��RK������{ҹ���P�ze��P��h�0��e�L�+H�����6�Ŧ�8�S ���Cs����Q;�"���+�b��/\#��ξ�q��LК��`l� ������ ������lo&�n�+U��B씯P&�0 �_��{db�!�Fg��鞕�)6��k����ˠu�!�X���#��a 1�{-;���:���W8Ca�B3���M�O��|9����^ҵ` ���C ����,��6���&���5E mI3��@&�t�(�A���ړ�f��d��F���=� ^[�|��T�;�pl����/��Z��3.��g�>�f&��?`;x�7z�"��3Coa?��0��w����9v(�Ț�n�6~ ?쒜Hx�]9�ב�LS�-)a��o|�k�/�F ��6�I�}�`2��@�e�ofk���F^3Ǟ(܂��n[#��p�[�D�uV��4X�XE���đ���z+�B����������4��3��#U=3��gcAO,�� `�F�l����^?�S��U ����tX3W��T�����`�% c(Η��Ȧ]��O�(�/�J�w�x����'�E9�C�l�%��>#��U@n������^�J��`�7}�_���1�d�t����&�X��n7�zG���Z�]Q��8:����G��6$��=��ά�:Z���a�/��t�m}�n��;!��!G�FXK4��}S��ۂ�;0��~d��a��y��E���*�˳���3AL�i���(7Y+�vp��⟲�k��6���,�cZZ����A��!9�w?�*<�V�������qakU7�;�����T)ڞ]5�� jpS�4��Zr��ʬ �M5��6�����"qBx\8�p!U� F����)�� �]�����i��9����әu�L=5߹k�7,�-1ք�n�-��|3M̒l�-մ�qZY���Za,@�)�,{4AywJk;ʪia��<QS�R��n��8C��gu�Xf�3�51��N�ۉa�]��I�埊p9��Д?g\MӸ����^�5�KU�����|]��"��Q��'w���G�7�|߂��&�0L'H�)0�^��6"��)�MP�8p��f1����饚�?�s�����B��S�Q��q�-l^tӅ���אb݈�lD������w'�aC�ΤX]� ��3`=���)P(���u8x�i �\>Zy��;"��m��<SqAoQ�x�60���s�定�f�"���YQ��v�aA�J�����7�*��\ࠎYÕŜ��5�{�����GĨ=��o��%�wcTy]Ŧ�M��Z��/�9r��m<$�ZB�k����q���H]��IkPi����?��Yᄙ�Za~���T����e��}���8��/ <)B���w�j%@�b-]-����8�,�B�.K��Z�E� ���Y� �59x��F�l�-��/�1���g1k�ٞ?��ӗ$������<�<=^f�i�@ ��_VS�!��1:��M�f ��U�øW�П���)1�b Z�ҷ��4��+JB��4�3���m�,�t�v�u�*�``�ՈG�Y�n�F���| ��N��NBH�27��U��W�l���L����+"S34�K-kʈ�6C�9*��a cm�X��f�Rn����O��I���}���D�c�;v�����5[N�ĝ�7�&�b� �-uv�F��q z�TCX���2��!cˆ �J����rh�#��1F?!b��#����z.DC�:}ǻ�(� M�)�q��]d�-���#TFw�G0l��1���H(܌ήU����V.egc~���=XЦ��n��B�藕ƾ*BB����/�#�Kɟ�:�����OX�85���LIGl�|�=�Яbe������r����~��4Ö�A�?ً���*w ����7�wI���gGۮ(T��n+s���%l&ͷ�j�Z-�����9g9@���*������Z��)�>�;+Wx�~��'}��eo ���<����H#,�?��s-�ʦ8����ס�{�t�u�#]s�)k�[�^;�K�C��6�����D���I%��i �!�[��1�k3�=ܗ�{h� .�-��`��-m�N�W����8����g����I��[��&�����/;J�� )���^[��� ��5�OT�|i�q��2Ea�zN9��n�3'í�[�tj��Y�풔�b��xPF}2=�Q�kC�?�����<Sx��k��n������Jc���s41����ʈ�wS|����0a]�(��9�/�h��Ȗ����U$�ZE����n�����|���m�p^� %��5s����h��m��N�n�ˡ�q�)_���ᓙ�+�H��fj��z�����t5G>ؘ8/ى��� pխ嚜�2*��E�C1�}���?m��T0Q&c7t|ȋ٠ E�j�d�̛��w�+!к��^�9.Q��ST"nU%�������1��&d4�Ԡ�6�p�^� A?�������=��ko�����P������N�>Y��E>���i�X�U�ỵ�:�����l ���"E ��\4��/�|�;���iթ��+uF�v�s���g:n �~u���9֫�?�?��l��{�d���?�f��N^#RF�����//��x�$��U�q��Ğ�j���3|!=Qۆi-H�����o <�ؿ���(1�����N�G��~�۰��_�ך�� �f�矾Pj�0>S'�^�-u?��=�����o9����Y.HNF=��k�"#�u��*䐤���g�%��v�m>�������y_ur�U�RJ^�Q!'9�g������?��D�n��9�{����H�v��L/�)P���k0��O>+NF5շ�o���^�$2S���B;p����3�
Static task
static1
Behavioral task
behavioral1
Sample
VG BP NEW 3.3.exe
Resource
win10v2004-20240802-en
General
-
Target
VG BP NEW 3.3.exe
-
Size
6.7MB
-
MD5
025b8ba205e42de5a45ca9e7a500d532
-
SHA1
7b3f0911c17aad2f5ae7e5e4fb1d6b3a9a7a986c
-
SHA256
8b42993eeae1b39004b3a8fc5542d857446e49c00b6c244c8d6d84d405069b4f
-
SHA512
af7ad04187e575f7468220ed7ce63576e35b875aff827d40b5dccffe94973ccc1a5ad0dd69f9c289fbc5dd8b9c42d2c6d6fdf4206462494baaf94243d6f973e9
-
SSDEEP
196608:YivJQjYHQlC23LX5XxvUpj/g6u9sGTtcOjl6l:YMJQy23LX5hY46u9s6tfj0l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VG BP NEW 3.3.exe
Files
-
VG BP NEW 3.3.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 4.3MB - Virtual size: 8.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE