Static task
static1
Behavioral task
behavioral1
Sample
a6fa606b7f6fb7dbebd7f46c701d054a7225d67b65f5ce501e67e929c172b73f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a6fa606b7f6fb7dbebd7f46c701d054a7225d67b65f5ce501e67e929c172b73f.exe
Resource
win10v2004-20240611-en
General
-
Target
a6fa606b7f6fb7dbebd7f46c701d054a7225d67b65f5ce501e67e929c172b73f
-
Size
1.5MB
-
MD5
805b3f934792c7a3cdee9b2d21eadba0
-
SHA1
35f47bebd4f9611d8a1f9c589a30f580e147d441
-
SHA256
a6fa606b7f6fb7dbebd7f46c701d054a7225d67b65f5ce501e67e929c172b73f
-
SHA512
d987edb8f308759c66ba356bfd2094c61e71fc541b2ae2266d030e17a24d204083fa0e53ad6efd4f495d109e946dff23652168629b9a07a7b3c2651ae310baf9
-
SSDEEP
24576:2wXFzqAaDt0MB2JpWRHou7zQlcj5Nq8rqksOJqd+ztv9mzY7do9lcyRFaku6n:hdqAaJ0MoJpu7zQ2jLr0+hlmU7dY6sv
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6fa606b7f6fb7dbebd7f46c701d054a7225d67b65f5ce501e67e929c172b73f
Files
-
a6fa606b7f6fb7dbebd7f46c701d054a7225d67b65f5ce501e67e929c172b73f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE