38[.]exe | Triage

Sharing

General

Target

38.exe
Size

23KB
MD5

0066fb1a86e5848ca5e043e252b3a040
SHA1

cc39431161e86a93362f335ab39e6ca5f0a238b7
SHA256

9688f68fdce40e34f18156a1f3ce894b863ae8ea80c516b9ba92799bf1533e42
SHA512

a101a538af759bd14203745e26ee98d2023ebb7039d5dec9068f75119ed1dba0f6b1758ab94e0c18899def479188789347ebbf8c14d19675697fdd47d13dce3c
SSDEEP

384:QCCdmp4rCmTRmGJCfjnlfXGXaX7zycBFCiaVVdITODeSzWxCisRtZRFjq8DrVC3C:QCCyMR3JCrGccd1eYPv7Znjb0Gt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38.exe

Files

38.exe
.exe windows x86

496078967a0f5aa343b8770c4162314e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

comctl32

InitCommonControlsEx

kernel32

CloseHandle
ExitProcess
FindClose
GetCommandLineW
GetModuleHandleW
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
MultiByteToWideChar
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
GetNativeSystemInfo

ole32

CoInitialize
CoUninitialize

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear

user32

MessageBoxA
MessageBoxW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ