Behavioral task
behavioral1
Sample
38a4a6002e1c3b57dc0eaa34b636a9d4.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
38a4a6002e1c3b57dc0eaa34b636a9d4.exe
Resource
win10v2004-20240226-en
General
-
Target
38a4a6002e1c3b57dc0eaa34b636a9d4
-
Size
2.0MB
-
MD5
38a4a6002e1c3b57dc0eaa34b636a9d4
-
SHA1
860e4e9b565ae01eb3a8b42d2f3e2c61d23ff169
-
SHA256
7e87dfb6870b5a72e79b46702e00fdb8edf1e54f704a6f0380b6b617b1683658
-
SHA512
35d7ab36412334c6bb576ffdd0a1823f53c0715620f42ae41375fbb0ca51ff1dc1699f2d5a2f4a384e13aa4c124e8c33bc6d3c20357355254e9f28ffc072bedf
-
SSDEEP
49152:AOzhQRmR7xEkVlsh9ngDEvWq7rhK54xC9hLY52apV8NgX:YY7FVlsXg+TIOC9hLi7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38a4a6002e1c3b57dc0eaa34b636a9d4
Files
-
38a4a6002e1c3b57dc0eaa34b636a9d4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE