Static task
static1
Behavioral task
behavioral1
Sample
c61860796392a623621d8b838a348fe0d4a0d78c64766928dd94785b8fa555f3.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
c61860796392a623621d8b838a348fe0d4a0d78c64766928dd94785b8fa555f3.exe
Resource
win10v2004-20240508-en
General
-
Target
c61860796392a623621d8b838a348fe0d4a0d78c64766928dd94785b8fa555f3
-
Size
1.3MB
-
MD5
5b82b22a663a2a610227b6d706f2ff06
-
SHA1
3b5ab67cd7b487c1f10dcf8f01d4299be6c94b0d
-
SHA256
c61860796392a623621d8b838a348fe0d4a0d78c64766928dd94785b8fa555f3
-
SHA512
343b4f7257b5c4a7d35d40db646ec69d6bec0f5c9ce4762911265d6c169be6e642fc8440aa047d4da6e38a43c1ac82adf3e6dda4555e1be1d7c66b92a9671c6c
-
SSDEEP
24576:2wwRA7QCm5HEOsGDRMxCrwLCNdgntZl1LIZA+rqGN08vIW9PlhEzCNAxpqqa:hHFm6s1MPCXStZHMBr/TIWvWzfQ
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c61860796392a623621d8b838a348fe0d4a0d78c64766928dd94785b8fa555f3
Files
-
c61860796392a623621d8b838a348fe0d4a0d78c64766928dd94785b8fa555f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE