Static task
static1
Behavioral task
behavioral1
Sample
4787f932e97af12c26a507f6afd0e5bc680790da61023eb54d60f22e9a21a204.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4787f932e97af12c26a507f6afd0e5bc680790da61023eb54d60f22e9a21a204.exe
Resource
win10v2004-20240508-en
General
-
Target
4787f932e97af12c26a507f6afd0e5bc680790da61023eb54d60f22e9a21a204
-
Size
1.3MB
-
MD5
d2ae36dc88cfdfb4f1a816d37bc22543
-
SHA1
5c86abc3e5c3f05bfd48cbf70f47a07445c5a2ea
-
SHA256
4787f932e97af12c26a507f6afd0e5bc680790da61023eb54d60f22e9a21a204
-
SHA512
000839cdd4baebc9391a81d9415a5f87fdb473d8964e4d7b47b557306bf29cd75d0ceb3d37f737fe770b3729d3c9487adad1cad621986ed1f28e269ccf7d9d78
-
SSDEEP
24576:oWyH5l1IngItGc28Ztw5FyamOnbBLjA9g3a9loLE3jbieQiO3qseAA0TwN14lD:VyZl1IgIUc28vwLyamObBvGCo3jOeOq8
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4787f932e97af12c26a507f6afd0e5bc680790da61023eb54d60f22e9a21a204
Files
-
4787f932e97af12c26a507f6afd0e5bc680790da61023eb54d60f22e9a21a204.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE