Static task
static1
Behavioral task
behavioral1
Sample
01ef142f9aedac2b09fd1034bbf712effa88838dd82f395981c408397ad59a3c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
01ef142f9aedac2b09fd1034bbf712effa88838dd82f395981c408397ad59a3c.exe
Resource
win10v2004-20240611-en
General
-
Target
01ef142f9aedac2b09fd1034bbf712effa88838dd82f395981c408397ad59a3c
-
Size
1.4MB
-
MD5
f7c29f08e83037838e20eebcc2235937
-
SHA1
416cad3feb521bd38ae4d20197bffc7e16ae34f3
-
SHA256
01ef142f9aedac2b09fd1034bbf712effa88838dd82f395981c408397ad59a3c
-
SHA512
5a426fc05353622294089c82fd14b175b2c0509d5f769dedc79b2d2a6f61fbdbed9d25e6cffd0f5cfef3fb9e1af50f5913eb007f6b36acf3d791ec45173a7c07
-
SSDEEP
24576:2wBpmnjsXvaoVjmVtl3hn7sfiJiLpyN7RE5oekySxh7i5d5hwMWhp4:hI+aOjmVtl3hnaiJilolEPXSxhidOpk
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01ef142f9aedac2b09fd1034bbf712effa88838dd82f395981c408397ad59a3c
Files
-
01ef142f9aedac2b09fd1034bbf712effa88838dd82f395981c408397ad59a3c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE