Static task
static1
Behavioral task
behavioral1
Sample
ec5dcd76a232dfcd9643366e804c09b1f4ae64aff71407152f42efd25d871d4c.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ec5dcd76a232dfcd9643366e804c09b1f4ae64aff71407152f42efd25d871d4c.exe
Resource
win10v2004-20240508-en
General
-
Target
ec5dcd76a232dfcd9643366e804c09b1f4ae64aff71407152f42efd25d871d4c
-
Size
243KB
-
MD5
88f741a5cbe54409d9b9e60db78d80b2
-
SHA1
443c5168049a4d388fd7377c04d2a6cf87ea873f
-
SHA256
ec5dcd76a232dfcd9643366e804c09b1f4ae64aff71407152f42efd25d871d4c
-
SHA512
652f522cda812506bae038fa8950c9fdfdde9be6765d847c338ee0a433eb09fb1b56d67d4aa3f978876889b9bef79e1064f2778c8c1c41dd38d2f8a3e1b71b84
-
SSDEEP
6144:dXC4vgmhbIxs3NBR3zskkSHyBiDQLyLSyV151qNv:dXCNi9BZAkljDQeLSkf1qF
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec5dcd76a232dfcd9643366e804c09b1f4ae64aff71407152f42efd25d871d4c
Files
-
ec5dcd76a232dfcd9643366e804c09b1f4ae64aff71407152f42efd25d871d4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE