SandboxTestPacked_SandboxDetection_Environment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SandboxTestPacked_SandboxDetection_Environment.exe
Size

133KB
MD5

cf0cb10fb1b08b33dadaf7242e6379ec
SHA1

b29306d4930eae50c55ed00217c81adda686bd36
SHA256

ceb57d51df7c39751500b26298d2e2f0fa52ebca36cdb92c6582a1dfa59c7116
SHA512

383d6b9cb8f7e71a9f1c3c617703e470e58689c71fb85274141f8077dc30e07fc5e42e2b2ae7a0e25a188583ef5a49e92c03a7c91eb2dc1f4bf9a89d069ca85b
SSDEEP

3072:0vGRsONZ5EqKw2kOlnpvSE2cUkPk4v7mRIXYedZokfsM:lRsO3OqKw2kWp/jLPkemnY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SandboxTestPacked_SandboxDetection_Environment.exe

Files

SandboxTestPacked_SandboxDetection_Environment.exe
.exe windows x64

2075c953b9fc5a8f49bf68a2ad16593f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetSystemMetrics

advapi32

RegCloseKey

ws2_32

gethostbyname

shlwapi

StrCmpIW

Sections

.MPRESS1
Size: 129KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE