Static task
static1
Behavioral task
behavioral1
Sample
38ab4cf9ff179030257fa467cea8237a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38ab4cf9ff179030257fa467cea8237a.exe
Resource
win10v2004-20231222-en
General
-
Target
38ab4cf9ff179030257fa467cea8237a
-
Size
24KB
-
MD5
38ab4cf9ff179030257fa467cea8237a
-
SHA1
a7800769f948f3da485ed27f726ae140bd794aba
-
SHA256
28531511d5a222475e721ff5db0184b7b7f4234bb4e81368e9b8fee8debc5dcf
-
SHA512
ee239988ed5bfc7c754ea611167a0b12693fa38d4d259047d259b739264881e0ed6f8f4a622d6a8f3bf9302781a3ffb99688295f3f5d8146673729f2819678d0
-
SSDEEP
384:+/Ne8zdTyBsyqAIZhgbwrTdyl3G3ou8CQLiPQm5PFIqeVOYXg1wmvvvO:2WsyqAggETQlW0xcN59Gswom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38ab4cf9ff179030257fa467cea8237a
Files
-
38ab4cf9ff179030257fa467cea8237a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE