Static task
static1
Behavioral task
behavioral1
Sample
11db53e5e04cfb0d8de10ce5a66899186bb5865f3dce3c6234964693c3eead34.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
11db53e5e04cfb0d8de10ce5a66899186bb5865f3dce3c6234964693c3eead34.exe
Resource
win10v2004-20240508-en
General
-
Target
11db53e5e04cfb0d8de10ce5a66899186bb5865f3dce3c6234964693c3eead34
-
Size
1.5MB
-
MD5
74f915430af45e198b861f0575a8234b
-
SHA1
b55bd687148f1b5381698754ff62b18e8006f095
-
SHA256
11db53e5e04cfb0d8de10ce5a66899186bb5865f3dce3c6234964693c3eead34
-
SHA512
c060fc6840082a74f6769a0baf7e19b97d01b76a28a522b2d7fa868799b4ca329c9749d857123650f346b5fe79c31984380d530b8df7431cb4382afee612cc75
-
SSDEEP
24576:oW6bO0CkQW3+a+ujJDfzZUUlCmRqqs/JERIMRJ97Oe5cVJ5DJ9pworw9EOmWXhYE:V0OdkQC1+uxfzZUUl7Rqqs/O5RJ97YxG
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11db53e5e04cfb0d8de10ce5a66899186bb5865f3dce3c6234964693c3eead34
Files
-
11db53e5e04cfb0d8de10ce5a66899186bb5865f3dce3c6234964693c3eead34.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE