Static task
static1
Behavioral task
behavioral1
Sample
8ae8ad7e3e1129fdb0da1b5768b54c34efe49019be73dbe7a033f1ff35c4f129.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
8ae8ad7e3e1129fdb0da1b5768b54c34efe49019be73dbe7a033f1ff35c4f129.exe
Resource
win10v2004-20240611-en
General
-
Target
8ae8ad7e3e1129fdb0da1b5768b54c34efe49019be73dbe7a033f1ff35c4f129
-
Size
421KB
-
MD5
b7f8e4ffa924138e4679fcfbafef60b6
-
SHA1
df0952b4f8af753bf358cb709dc412e418973407
-
SHA256
8ae8ad7e3e1129fdb0da1b5768b54c34efe49019be73dbe7a033f1ff35c4f129
-
SHA512
6552ba8cb205935994c7c19c61a654c1dfa609d64b5a28c003ed02d8ecc94bb9266257d0c7b070411ad57fc1249383031701b4d2022cf49927e218e1e62000e9
-
SSDEEP
12288:A//vi9BovyiQfjnzKIJNoOdybG4jaLe/exeXV+xLY:2wF3LzPoayqiaLGexwVkY
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ae8ad7e3e1129fdb0da1b5768b54c34efe49019be73dbe7a033f1ff35c4f129
Files
-
8ae8ad7e3e1129fdb0da1b5768b54c34efe49019be73dbe7a033f1ff35c4f129.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE