Static task
static1
Behavioral task
behavioral1
Sample
38b93ea234965052086d2a949bdee517.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
38b93ea234965052086d2a949bdee517.exe
Resource
win10v2004-20231222-en
General
-
Target
38b93ea234965052086d2a949bdee517
-
Size
144KB
-
MD5
38b93ea234965052086d2a949bdee517
-
SHA1
52bbc626a9a131b65c50b8ce5f6d016c79350668
-
SHA256
b7e239ffaf4c3a15ccb5b9261a0fdb7d45fb9beb599d4b05f2cc4245db0ce118
-
SHA512
6cf713ebfc8b4e7f31ce2b9bbb922a6bb49d5751b0bf53eee47e232f91c8066f1388de182b51ad572ab4862b6b733e6eb60e768d282c940186fd9301f258432d
-
SSDEEP
3072:WRjnrTY9kOs7k0mjKEbFoO3F8UsTUk+Tzt9R9eM3uaD/D1QT+nk:qjnrTivskdhXzs7Azt9RCaD/KTgk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b93ea234965052086d2a949bdee517
Files
-
38b93ea234965052086d2a949bdee517.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Q Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE