Static task
static1
Behavioral task
behavioral1
Sample
3c226c75798da7961bc02f44ba28e5c4f8da9532b4f7413841d7d324ea1cdbc1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3c226c75798da7961bc02f44ba28e5c4f8da9532b4f7413841d7d324ea1cdbc1.exe
Resource
win10v2004-20240508-en
General
-
Target
3c226c75798da7961bc02f44ba28e5c4f8da9532b4f7413841d7d324ea1cdbc1
-
Size
2.0MB
-
MD5
12ec394efa41b5c7a5eeb83d9a47fe30
-
SHA1
ab714e5e79cb0834e147d19831311f9877d918f8
-
SHA256
3c226c75798da7961bc02f44ba28e5c4f8da9532b4f7413841d7d324ea1cdbc1
-
SHA512
971068b0c8be8c1d328e65af7cf6b58e3d5474e15989350c364c81b66286d0c94b5274511242a44d7ee46e6a6cec6e1a430974c2493304a9ac71d6454716fe58
-
SSDEEP
49152:h7DFAGK3sPpkg71LmtJtFv+QcUNsy8FVgHKeb40js3tGk3i+sXFC:U3kmCotFGUNMFVgHKd0js3tbi+N
Malware Config
Signatures
-
Detects executables containing possible sandbox analysis VM usernames 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_SandboxUserNames -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c226c75798da7961bc02f44ba28e5c4f8da9532b4f7413841d7d324ea1cdbc1
Files
-
3c226c75798da7961bc02f44ba28e5c4f8da9532b4f7413841d7d324ea1cdbc1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE