Static task
static1
Behavioral task
behavioral1
Sample
68bc9557578d9846e0206c9aa4e8a127a4988bc38c46ed847e11f00c1c7a0803.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
68bc9557578d9846e0206c9aa4e8a127a4988bc38c46ed847e11f00c1c7a0803.exe
Resource
win10v2004-20240508-en
General
-
Target
68bc9557578d9846e0206c9aa4e8a127a4988bc38c46ed847e11f00c1c7a0803
-
Size
1.9MB
-
MD5
370589e38a9041c57c5cda192f6ee5ec
-
SHA1
eb6c7818b5b1b204ab754195fee3faa02d1098a5
-
SHA256
68bc9557578d9846e0206c9aa4e8a127a4988bc38c46ed847e11f00c1c7a0803
-
SHA512
b1fc62eb3337b9b55d7d5ab9ee2dca1b4e6a152d3736501fdb091845d86913fb2899b75947a7f601dc83138bc94667d8b678cb4d66fa244ee55139ab05878c50
-
SSDEEP
49152:htYvgK/b9eo6AoaZXhEG+6ULvY6ZHKuN57Ymr4UY5a:8vxSAoaZTazgu0UxYE
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68bc9557578d9846e0206c9aa4e8a127a4988bc38c46ed847e11f00c1c7a0803
Files
-
68bc9557578d9846e0206c9aa4e8a127a4988bc38c46ed847e11f00c1c7a0803.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE