Static task
static1
Behavioral task
behavioral1
Sample
38d4296c2dda38d5b6ed29962c3a9f15.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38d4296c2dda38d5b6ed29962c3a9f15.exe
Resource
win10v2004-20231215-en
General
-
Target
38d4296c2dda38d5b6ed29962c3a9f15
-
Size
736KB
-
MD5
38d4296c2dda38d5b6ed29962c3a9f15
-
SHA1
dbcb27211e5cddab65ddca6915bcffcf27240cde
-
SHA256
9bc1fa4aa23929432bacc24f05512c2df0e5672dd9e4159fc476829187af2b4e
-
SHA512
49dcee5f2f4f272ae9358576d2897dd7609ac82fd40f85aead134768c3fc8dd1320b5042ea19548e8e9e272adf6845ebad1f498bd4447e6767973bbf012106a9
-
SSDEEP
12288:3GUeFU78kDDZF6foLZMnhBW8+F+dIgFZ0VrIYwNNN/Nlj:aFUIkDNF6gLZMhUXFCv0q3NN1l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38d4296c2dda38d5b6ed29962c3a9f15
Files
-
38d4296c2dda38d5b6ed29962c3a9f15.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
DuD94 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 718KB - Virtual size: 718KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ