�?I��sxN�jQ+��Ж�5Q�.9~sw'ОX�_��H˦`��r9���t+�+����)�����Sw��&�xD�E�K�����۪��G��ǭ�D�� ��P̀�b����z������t��F {,��ƫT\{�1}�ޜ6$��� �E��I�� �%if���$A��K0)�8�Sل ����|LQ�L��ȍ���A��<�WVO�wۦ����1z����g �Sꑍ}��I��a끿<����$ #�}�u�����[����?��{�ज^�/����0����G>��}�Y��{�E>�'�4��L�3��#Ņ tn��Ѡ��/f�v������|]P!�ڄ�;�� �����u�1:��*J��L�{��R�27@�@� 9 �$������:#�s��w��!,����=L$��@Y�hn��r%�?�|�v�A���4�-<A��j�����xܪ��+l�]����r��Y��`wWj6��Ҥ�ab���hM8���x-}o/�I��x�.�Z��Yp�'`���Y��s�0���:��nv=�+���xwv)m��V�.�ι�9@�b��1Ι���g9�2>������?L�$�!*+d�$��B�"���vʣ%�zP��ޯ��䟰5���α\ey �gi�I�[��_ԓ+��u_�j�R�l��-z7��@�|����,��۬��E��Y��w]�-�u��(�y X�[ ����a��,���S�m|�)����hϊ���:wMk�i*��˪ :�%�|�K������VR��t'(c�O�_�,+=��ڧ��,� Tn ��_�q�im3�Cb(�\LG Qh '6/�6��Âx'��tys�F$���}��i:����F���[��'Zr����N��x�X�m�8y1��@�ǪB5�a`����.ڹ���?��t�f���+��*j���z@�H#��z�\�)�fv=ԧ�\_dD�YrQX�1[O�:S�V)a�f��}����������┘*��ųr��*�;������ �c~]�~�PO���:q��Gzv�r�R�(�R�Y�������܇�~�K͏�Hz��g<��8���ګZ��+;�hѿgM�(G�xɣ��v�n-���v��yl�#�.`#�������r���k�W��R�&�p��Z}�:�I-��$�0J3G^��/h�{U�k�^���ӑ1���r����m6���ɰ0�!��36o<�#�nPW�*y!"^�?]\�v@�K�@ W#��ZD����T����D��8췀+�Bz�f�D2�)��yё���w��"[z4������ �)����`���.f��:?ʈO�3O�����~��C�B\yTot�$��YK��P�D�tWɞ�!�T�o���+W��3Θ���[B���猑P1��t�n�`ːg/H5�z�#?��'��^zO��� ��8��9�v�'�,��`�K�Ǻ�%��σ�@�[sE��?=�뒇��®`O���bf�Jo�~k9K)�&��(]"738X�B�:��b�Tf�1�&�Z�?�NՎkŝ�s�O���Zx���!�áX{�{�f���3�v��EO���篶ߤ�j�k-/��F"Hx��a��_�.�������f{����&>����sn�v����G����O�(l6�\���=��8����^�Z��e����y�+��Ix�3�����YSd ��]��\v���Bm�a��I_O�[`7�WV�M�6�Rb� ����U�Xf1��]�b�H����8�)����Ѯ���{�0-NIҵp@�~�o�z?� ��Qb��R{�w&ݧ~H��Z���nQZ��.�8��e@d�rf��& $����ܮ���[�x�J B�i�3�f#1�d`P:�kf�6��B�i������ ��}�6��//���w�߫���^!�ө�d�P��`B�;Ӵ�K�%��t�;{gR �Ǡ&�b�]�?.�c�/�]�w�R�(E^�����'f�,WM�q]��q�a�� �����t��'�Ix����6.0�6�CKP/��r���M���p���E.X��H�z��Q��$�ן�h���S\mh��V��u�E���@7�WQ�K��e�UqYJ��ؤ/����^�E�M�Fc�]#�!�9:$�H)��SxG�u��b`j�1���/+6<=���T�� (7���>}���I��l-_�M��E���\Ǽ؞�?�_ݕ� ���a�oy��%;�|0�ƞ�=�� �кRd7M�iSM �x!�%�|[�E��h^c��D�7e�Ts�u�2D�8+�犚��O{i�W&�\�)�F�7A��nk��9:Y�Q_�ȇǕ������ ;O�dI�H n���Ƴ���5����7���u fV���ٛS�B�]�Q̇��D%$F�^�*�"\I5��n`tA%�Ayn�[�v�p٥7v:œ����8=�r��K`< ��-���,#l��Aェ�A�a�*������7�I��� ;�����Κ��M�(F$'��u���I��,4ZX��5&���0�g���l����Z q�u 2C��L�Zh�!��i��і�yhZW9Y;��o��P���� D�@b�)��J�aa����)���}ʴ��8_�Vt֓��/��/��-z=����=�!�>.�|��9=���ޖx6�8��fΰҵyʼn�*{���5 GqY�(�@'x�,1���j���nVJ���=O��Z��}'jLa �e�7���x� �<�P���nĬ��HA��umS��]1f�/��XӯY�3�~�;<[<k,X#[�K��'9��fd���"|�@w�+ʻ�z�ՙa�n\�1m�`W#k�6�<�*2�6��>�E卲Bw�T�r�I�[��74�4t,��N$Mq���ǀ�,���}4���PCQ�v{���T�rp ,�J�OI�IRz��`� �$g{��m��ȡ%Τ��)p���yt�F�C�K�S3��xz��jE3pm��@)i��׳�1�T6��x�o5N��f��v �qN.6�v�(����ƨ���5[�F�$�|u7ڒe���"�V��$��.^.w�Yat�2η~���Z��;�d�W�S�B�Ot&��{ho<@g���wA�=�)�P�����������(`Jd7���jO_���(�?s�t^���H��B|�u�:�rä��������� �*ڰz�W�eè��CMq��C0Pn@]vU�q`��sպ�3�wLU��ɎMt� ������O;�T�]z�GD26�e�ǐ�$P�x�f���z�-gQEp��b�eѿ�����_��n;V�����4�.]=�% e��ܱto��hm웗\�mZ�cزGjI��
Static task
static1
Behavioral task
behavioral1
Sample
V_main.exe
Resource
win10v2004-20241007-en
General
-
Target
V_main.exe
-
Size
2.4MB
-
MD5
eb20ae7073c363f97b2a42878b6bdbc4
-
SHA1
ff1ad88be18ceb8bc3167d1b18d71b08138b270d
-
SHA256
fb04167bc46b106878144485fb1d7f712d976e8717062dcf581e539036c10922
-
SHA512
ee04988373fab6e26e8ef174bcbea2e3315ccfef5f3e2bfd6c65c8ae01bf10900f18d27b68eab15a63eb2e75c7c51f5df9426bbffb918d9301d08114aee2c423
-
SSDEEP
49152:tWs9ii2J+AQceZktazy0nKxzxpW8gezQJ97BcnTIQ6aDbEPy9T:tWs9ii2J+ZZkozznK70teUBcTgZy9T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource V_main.exe
Files
-
V_main.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 124KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdjlfkas Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE