General

  • Target
    bokmers_cracked2.exe
  • Size 64.9MB
  • Sample261006-tb5blafe23
  • SHA256 3d99446845551b52bc1a69c8ca70742b1e815ff30f6e14f2fa2932a06b8a394a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • Detects checks for well-known automated sandbox usernames and hostnames 1 IoCs

    Searches for common automated sandbox user or computer names (Cuckoo, Sandbox).

  • Detects checks for low hardware specs or lack of mouse movement typical of sandboxes 1 IoCs

    Inspects system resources (RAM, CPU, Uptime) and cursor movement to evade sandboxes.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • bokmers_cracked2.exe
    .exe 64.9MB

bokmers_cracked2.exe

  • IMPHASH 7034e0d440797d6d707d4912ead83428
  • SHA256 3d99446845551b52bc1a69c8ca70742b1e815ff30f6e14f2fa2932a06b8a394a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects checks for well-known automated sandbox usernames and hostnames

    Searches for common automated sandbox user or computer names (Cuckoo, Sandbox).

  • Detects checks for low hardware specs or lack of mouse movement typical of sandboxes

    Inspects system resources (RAM, CPU, Uptime) and cursor movement to evade sandboxes.

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
56793776
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths