Static task
static1
Behavioral task
behavioral1
Sample
1938f37f0f7a5740aeda2d3af285b0e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1938f37f0f7a5740aeda2d3af285b0e8.exe
Resource
win10v2004-20231215-en
General
-
Target
1938f37f0f7a5740aeda2d3af285b0e8
-
Size
417KB
-
MD5
1938f37f0f7a5740aeda2d3af285b0e8
-
SHA1
4717eafe71d5d9c7989191cdae7234fb538f172a
-
SHA256
f1677689771f7b7e0e6eb1af0c3194a6b2cdbb92e03693abbe4e6707328348ae
-
SHA512
8fbd88ee492b8fec2139ec483fe1b96e0627385b46cc9c923198cb3dcd211e5e83eb02bc89b62a97ebff5ca4163c8c5bc8f41d0a2d48362a60494c42be24c567
-
SSDEEP
6144:MFI10hHbyNt9JfHE6H4IgtROU6EyOHu3YBuL+6VCJ9HHSjfCBgwQ0Lcr:PGhbyNt3/lYIgyvEvHu3YFbyDktLcr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1938f37f0f7a5740aeda2d3af285b0e8
Files
-
1938f37f0f7a5740aeda2d3af285b0e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 597B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ