Static task
static1
Behavioral task
behavioral1
Sample
VSVy.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
VSVy.exe
Resource
win10v2004-20250217-en
General
-
Target
VSVy.exe
-
Size
923KB
-
MD5
b2ab62452cfdf6fa8398f51668ae73e9
-
SHA1
b23a3d5637b131d06ef915f9468e21e9b9432819
-
SHA256
d4e7b1bcebd9b9150dc206559b929744b9b592d3d62baa7902f3979b60336177
-
SHA512
e49afb48ccaa5166dbc449a3c4f4b06c70e915a016f6dd2253e23d2a722c963818d53c2cc3a33fec16cbdb81e3a4c50b3e6543d0d4ed9afea3dca602c0419dbe
-
SSDEEP
24576:M1wMRHPv6tkVAg5zurEdFX9hU9IPYKIs+WAJ+Xmuah9/WMnqMRH:GwMZqaVASpJXPf+WAJ+XTahMiqMZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VSVy.exe
Files
-
VSVy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 870KB - Virtual size: 870KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ