Static task
static1
Behavioral task
behavioral1
Sample
2f1ff6eabe38425a05db7481e1b3775b33855b41adf401091d195339da0304d4.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2f1ff6eabe38425a05db7481e1b3775b33855b41adf401091d195339da0304d4.exe
Resource
win10v2004-20240508-en
General
-
Target
2f1ff6eabe38425a05db7481e1b3775b33855b41adf401091d195339da0304d4
-
Size
1.9MB
-
MD5
4deb106878ff581f63af2e4b751f9a30
-
SHA1
61c8b384532f95a16f175c3852b3072a8b9a97fc
-
SHA256
2f1ff6eabe38425a05db7481e1b3775b33855b41adf401091d195339da0304d4
-
SHA512
e5869c2ccdc97f601a6d95ae44df5b88c4d09383d6b6385e4515780ccf6bd7d95ef5da69a23b66caf9b9422b3534751f1aef703fe2cae85e7a731295b6678572
-
SSDEEP
49152:VBA3HvbIRx8cjK5FhAfJsyQLDKwV99WhsU5sa7L:eEiFqfJsyQL5mn5vL
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1ff6eabe38425a05db7481e1b3775b33855b41adf401091d195339da0304d4
Files
-
2f1ff6eabe38425a05db7481e1b3775b33855b41adf401091d195339da0304d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE