Static task
static1
Behavioral task
behavioral1
Sample
9e243ad1bb936a8bf510e962062d4bd03f59310d07222828e8ad6774cfe04112.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
9e243ad1bb936a8bf510e962062d4bd03f59310d07222828e8ad6774cfe04112.exe
Resource
win10v2004-20240226-en
General
-
Target
9e243ad1bb936a8bf510e962062d4bd03f59310d07222828e8ad6774cfe04112
-
Size
952KB
-
MD5
2dbe42ed601b0c37aef822aa4f42ae6c
-
SHA1
9a8e06cd9dad8e78a8c0d410bfc841d061a71715
-
SHA256
9e243ad1bb936a8bf510e962062d4bd03f59310d07222828e8ad6774cfe04112
-
SHA512
f4d024a1916b198a13704c1d80826bd31d1caf98db80e1a5bd3b63ba723bd4def05f5700fbba03a5089bc45632b0bc2fbc48ddbc28718b3e442565a0b768abac
-
SSDEEP
24576:2waWQkUZiNyT8wV6r5G64hKqNY5hy56neioPGkBsbj1FRT:haW4wyT8wX5NUhu6nDoPN+1Fx
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e243ad1bb936a8bf510e962062d4bd03f59310d07222828e8ad6774cfe04112
Files
-
9e243ad1bb936a8bf510e962062d4bd03f59310d07222828e8ad6774cfe04112.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE