Static task
static1
Behavioral task
behavioral1
Sample
38692a90ed6b43cba3682db5f080cf96.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38692a90ed6b43cba3682db5f080cf96.exe
Resource
win10v2004-20231215-en
General
-
Target
38692a90ed6b43cba3682db5f080cf96
-
Size
17KB
-
MD5
38692a90ed6b43cba3682db5f080cf96
-
SHA1
fb3ea9a3b8249a748a4479d286cb72fa58c59f7e
-
SHA256
3954c41b6eb7b785c3d1b2fd863712f2c8c2a4579f84ddb01d9f57483d24aff4
-
SHA512
a156990f30233036f1bec1b35924b503489795d59c504909f0616fd4522800f8ef6d5ef230feed15fff9ecf5ed0d32f902ff220ad2a04791162f09d3c7b10991
-
SSDEEP
192:J3Ts4nw3s89VDy4i/3v5voFoOH4N+dmDaJwnxclrpXQEHOlw3bGoZDJ/XIRB3o1k:l4S89dhi/9oyE44RHtHOWbHJ/YRZS6W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38692a90ed6b43cba3682db5f080cf96
Files
-
38692a90ed6b43cba3682db5f080cf96.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.rdata Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE