Static task
static1
Behavioral task
behavioral1
Sample
f438d6f5a86580297239038123b729dc40fb7ae7e97bd60fe03fdc78bea53f04.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f438d6f5a86580297239038123b729dc40fb7ae7e97bd60fe03fdc78bea53f04.exe
Resource
win10v2004-20240226-en
General
-
Target
f438d6f5a86580297239038123b729dc40fb7ae7e97bd60fe03fdc78bea53f04
-
Size
321KB
-
MD5
45689c57793f093fca021ae59e17d5ff
-
SHA1
9aff4c7a38d7054414b997d59cc046fd931085c3
-
SHA256
f438d6f5a86580297239038123b729dc40fb7ae7e97bd60fe03fdc78bea53f04
-
SHA512
54c953bc705656f47caff2d8b5eeb5ac7aa77c385585b0ba4a50ab836ede39b8c68c6b0b601501a45ca67eebd43de05f3ed8c9ecb7543e66c7b7c4302bcd2d7d
-
SSDEEP
6144:dXC4vgmhbIxs3NBRh9Nu1T+yyLPn8l26EmVHzJOnQbnMjWI:dXCNi9BXixyzn8XVHzJcQgH
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f438d6f5a86580297239038123b729dc40fb7ae7e97bd60fe03fdc78bea53f04
Files
-
f438d6f5a86580297239038123b729dc40fb7ae7e97bd60fe03fdc78bea53f04.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE