Static task
static1
Behavioral task
behavioral1
Sample
38c39bc08cad2fe412865ead78a9bb07.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
38c39bc08cad2fe412865ead78a9bb07.exe
Resource
win10v2004-20231215-en
General
-
Target
38c39bc08cad2fe412865ead78a9bb07
-
Size
908KB
-
MD5
38c39bc08cad2fe412865ead78a9bb07
-
SHA1
e5ea7329b3bc9952a7b4e44d9958a6a360da324c
-
SHA256
ccdb241bca342a0c7dd340a9c48d1714f137f685a8d96335e55b27dabf5f6bb3
-
SHA512
22c2f3bebca23838e8cb1c0154f51b578299f6db0226b6994ccd77586f9fcdde8e6444d0e4ed5d803273c5e60361ec91e4781e0180bb8780bdc57c968a298c39
-
SSDEEP
24576:MW2pLUBWXXY48idRjMFm6d36FdAHRGbDg8C+:MhjXp9B6J6wxmC+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38c39bc08cad2fe412865ead78a9bb07
Files
-
38c39bc08cad2fe412865ead78a9bb07.exe windows:5 windows x86 arch:x86
0ac52dbb4649e25c84ac894aba621e32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
msvcrt
__dllonexit
user32
GetAsyncKeyState
CharUpperBuffW
Sections
.text Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 43KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nDg0 Size: - Virtual size: 914KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nDg1 Size: 907KB - Virtual size: 907KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ