Static task
static1
Behavioral task
behavioral1
Sample
89de81299e1d56fb9af107cfe45143455b9495d7b9d0deea147da4f38816cb24.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
89de81299e1d56fb9af107cfe45143455b9495d7b9d0deea147da4f38816cb24.exe
Resource
win10v2004-20240611-en
General
-
Target
89de81299e1d56fb9af107cfe45143455b9495d7b9d0deea147da4f38816cb24
-
Size
1.7MB
-
MD5
2335c92d4ff87c10a4be6123627339a2
-
SHA1
b400b812e47b4ff67a660ade8bb9e14b17160969
-
SHA256
89de81299e1d56fb9af107cfe45143455b9495d7b9d0deea147da4f38816cb24
-
SHA512
81a166048489bc11b01e1110a452571cf30e467aca8f684288628c6d8fb06894a84e33dc621369dc9ea82e29e258a73307903dc2082d07d9dd232ba4102b28ba
-
SSDEEP
49152:h5bz23s09s4NUrQ/5/y+pTGDIoqe4+mxalM+6d0fXtsxS5H:n+sgC0/5/npiDIoqeSQOWSxSV
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89de81299e1d56fb9af107cfe45143455b9495d7b9d0deea147da4f38816cb24
Files
-
89de81299e1d56fb9af107cfe45143455b9495d7b9d0deea147da4f38816cb24.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE