Static task
static1
Behavioral task
behavioral1
Sample
6489813ba6a76b995d53df9b1bcbba0ac1c6fa0cbe30762b6dd781b2fad0f39f.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6489813ba6a76b995d53df9b1bcbba0ac1c6fa0cbe30762b6dd781b2fad0f39f.exe
Resource
win10v2004-20240226-en
General
-
Target
6489813ba6a76b995d53df9b1bcbba0ac1c6fa0cbe30762b6dd781b2fad0f39f
-
Size
1.2MB
-
MD5
7504d9a283cbf78c4d09e74bed9c767e
-
SHA1
2392d170a9a4a44ba8bfb43e04811da7e3a4a51d
-
SHA256
6489813ba6a76b995d53df9b1bcbba0ac1c6fa0cbe30762b6dd781b2fad0f39f
-
SHA512
feafa64037545e785ea3de6e3875a83b4d50678b1633539bb80e3609e57184e13dccc555d9fa8645368af9641390eb2961aa6e9d7eb15e84cec1b297e82b12ed
-
SSDEEP
24576:2wMT40GrVQrf8dzW5qq8nKfv1yM3wZnfzn6t2/Qt/4TQddkqx3dads:hMT4dK8dzpjvM3wZnfjRUATQUo3ods
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6489813ba6a76b995d53df9b1bcbba0ac1c6fa0cbe30762b6dd781b2fad0f39f
Files
-
6489813ba6a76b995d53df9b1bcbba0ac1c6fa0cbe30762b6dd781b2fad0f39f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE