Static task
static1
Behavioral task
behavioral1
Sample
38932d11244dbbdd3ff6ce806a853a19.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38932d11244dbbdd3ff6ce806a853a19.exe
Resource
win10v2004-20231215-en
General
-
Target
38932d11244dbbdd3ff6ce806a853a19
-
Size
139KB
-
MD5
38932d11244dbbdd3ff6ce806a853a19
-
SHA1
b64bb455104716ea4e9d4e760ca97c4dcc66448e
-
SHA256
f0e4a2234534ef5b610546834c3dd7752e73cb73dfbfac78e3a305e9dae9c817
-
SHA512
cb5f2eefbbd88c82bd9f8e54692f306f3ddaba8f7c805b368e1ef7adcb4c268a2a7f09fd7a0634c74693e62ac14f08ce3b0e591f75bef9cdc423a745f9d9d1c4
-
SSDEEP
3072:NLiElP6ozYZfkfRC9QtdXfJocfl3GgnbPE+QLh4xPWl7BXBJJwDr:NLtB64+f/QtdXfJoAl7bPE7LhSPWl7Bx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38932d11244dbbdd3ff6ce806a853a19
Files
-
38932d11244dbbdd3ff6ce806a853a19.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
tw Size: 3KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jahz9qk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE