Static task
static1
Behavioral task
behavioral1
Sample
aa7515c0e9d251bfca967844f897cf962ccae81af565054d10fb86caf80359a1.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
aa7515c0e9d251bfca967844f897cf962ccae81af565054d10fb86caf80359a1.exe
Resource
win10v2004-20240226-en
General
-
Target
aa7515c0e9d251bfca967844f897cf962ccae81af565054d10fb86caf80359a1
-
Size
1.6MB
-
MD5
9ee536695c71c768f800456f15b97329
-
SHA1
cafec3213be63a4fc3324f68f0885bf1ed766606
-
SHA256
aa7515c0e9d251bfca967844f897cf962ccae81af565054d10fb86caf80359a1
-
SHA512
d30409624b07b202a95f95af651c3d6b1c32a1b35728e35c09b0fd78a859ab3678220a28ca951268a6704b2f017d6c355fa46d9d9dbaaf44b0357a5a8d3f258c
-
SSDEEP
24576:2w/KuB9J9j6L7HJzuWrIJDcmhvcjzoiXcI/fQGoHzf2UzOWoaa+5B21g55IusJ5c:hiINEdeDgjzzcIXQGQzf5cX1uzYG
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7515c0e9d251bfca967844f897cf962ccae81af565054d10fb86caf80359a1
Files
-
aa7515c0e9d251bfca967844f897cf962ccae81af565054d10fb86caf80359a1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE