Static task
static1
Behavioral task
behavioral1
Sample
3effd176d1c5e5d12d84cf1169f185fa716dbdf11fe975a833d8a9b4439b9896.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3effd176d1c5e5d12d84cf1169f185fa716dbdf11fe975a833d8a9b4439b9896.exe
Resource
win10v2004-20240226-en
General
-
Target
3effd176d1c5e5d12d84cf1169f185fa716dbdf11fe975a833d8a9b4439b9896
-
Size
1.8MB
-
MD5
9b255b4cebfba0ffc38d4c06133f1077
-
SHA1
3a6b16686f339a9dbec9f1c3bc0fa51f91f5b73f
-
SHA256
3effd176d1c5e5d12d84cf1169f185fa716dbdf11fe975a833d8a9b4439b9896
-
SHA512
19b63097c87210e39cc12a3342970b2da3b9de8d01eada327893301fa1df05e57ea14ff90d203228e8dfa9da5b7135382b8226705eea02be8244e6814d149db1
-
SSDEEP
49152:Yy9mZjjVkiLGYNN789Z2NdI+Uh3//HBLqlLmJ3MG:d9mV3LVNQZ2DI+UhvJLqlLml
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3effd176d1c5e5d12d84cf1169f185fa716dbdf11fe975a833d8a9b4439b9896
Files
-
3effd176d1c5e5d12d84cf1169f185fa716dbdf11fe975a833d8a9b4439b9896.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xpjgw Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE