Static task
static1
Behavioral task
behavioral1
Sample
sandboxie.plus.x64.v1.0.5-bidasci-patch.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
sandboxie.plus.x64.v1.0.5-bidasci-patch.exe
Resource
win10v2004-20240709-en
General
-
Target
sandboxie.plus.x64.v1.0.5-bidasci-patch.exe
-
Size
40.4MB
-
MD5
65937215145b8bf919888d57b4b2eff0
-
SHA1
c17326f4e677a02bb1e03339e4d4ea7ab776c809
-
SHA256
02c092e72ff33ec2a4f34a2225429bff62511a5ab0973a79019a3b5cc53ee684
-
SHA512
a092cb2b62bfed98e2f6d450e429e6bb895e3d2791ddc722a9fd99afc0bc1370ce73e3b405c43d61d969cf06a3474cbb37c8ef0aab54a2478c11ea0573f97958
-
SSDEEP
786432:vyPfTMEvTWaoAJBtrasIpAKDEjMm9HAJBtrasIpAKDEjMm90:vyPrXWLAJBtrasIpAbjpAJBtrasIpAby
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sandboxie.plus.x64.v1.0.5-bidasci-patch.exe
Files
-
sandboxie.plus.x64.v1.0.5-bidasci-patch.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12.6MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26.7MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bidasci Size: 998KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE