Static task
static1
Behavioral task
behavioral1
Sample
38d6c46f54dd98757e1b1b48a4bf7f4f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38d6c46f54dd98757e1b1b48a4bf7f4f.exe
Resource
win10v2004-20231215-en
General
-
Target
38d6c46f54dd98757e1b1b48a4bf7f4f
-
Size
483KB
-
MD5
38d6c46f54dd98757e1b1b48a4bf7f4f
-
SHA1
9430e6f4e8b4d22be8a888d9b48c94a702d77b42
-
SHA256
57f7eaf79fe97503e2a49eb83636b4945401a48c0514424023224cccfde089e0
-
SHA512
0462cd996d7bce79eb8fe6940f82f5f8690c0793dbd590adf36c7630c549dace0a32e3cc3cf7021b7fee22bd6eef3c08c70a5df6f36ab9b2dafd7446e3df2946
-
SSDEEP
6144:ggrCWlK1ZFQXegaCZBIPCto0B6wjkT8fhD1NDjMHYi7vpBu0yrnEkxJaWV98eAw:gguWlKH5mto008fhzDj2fF6aG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38d6c46f54dd98757e1b1b48a4bf7f4f
Files
-
38d6c46f54dd98757e1b1b48a4bf7f4f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: 5KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 469KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ