Static task
static1
Behavioral task
behavioral1
Sample
38471533c5aa3af66915e70db7cd4abf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38471533c5aa3af66915e70db7cd4abf.exe
Resource
win10v2004-20231222-en
General
-
Target
38471533c5aa3af66915e70db7cd4abf
-
Size
2.9MB
-
MD5
38471533c5aa3af66915e70db7cd4abf
-
SHA1
46750cb17ee204fc4474a6141994331872da4d5c
-
SHA256
fd1e2e24152588a89b102b2c543a9a7e48a71514a034be0ed5c0202b59eb973c
-
SHA512
1dd1c89664b03875f5d5410a246ffa5ecac2aaca143faae1dd297bd11105d5ee316868fd079ca5ab32bf1548c0821799fd1ceee58a7c4b16b23c853b36480d87
-
SSDEEP
49152:Sq+rrNDS5lSgWq+rrNDS5lSgY4zmDta4qlYvoGxUSJpXJydB3IVLfUT:ANDS5lSgsNDS5lSgxC6sRXJWCi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38471533c5aa3af66915e70db7cd4abf
Files
-
38471533c5aa3af66915e70db7cd4abf.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ