Static task
static1
Behavioral task
behavioral1
Sample
38e6477e13dee784a4fc41a726cd9740N.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
38e6477e13dee784a4fc41a726cd9740N.exe
Resource
win10v2004-20240704-en
General
-
Target
38e6477e13dee784a4fc41a726cd9740N.exe
-
Size
1.5MB
-
MD5
38e6477e13dee784a4fc41a726cd9740
-
SHA1
1137d0b2f2272aded174e383f664f2bad25576fe
-
SHA256
d69836e6a1eabc575c4e7b85803521bc9086f3195058229c6198276cbd48efac
-
SHA512
3d5ac47ecd7370aa238b67918f3081bdea6c5d79cc93232485fb28e220a2c38f8a39d5e299fa78dc9d23f3fd211a825806777531b44829cc1a7ccf0041e36b2b
-
SSDEEP
6144:CZSE8UGJwiYwUfWeR7oHYnOW111mFW+YecdbjMMqcXmr8MMtjyhX9+FL:u3GFY/jWHYt1yW+Jy3MMq/r8MMP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38e6477e13dee784a4fc41a726cd9740N.exe
Files
-
38e6477e13dee784a4fc41a726cd9740N.exe.exe windows:4 windows x86 arch:x86
4517235d6f012421e28370dfa4e6f8c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
rpcrt4
RpcMgmtEpUnregister
Sections
.MPRESS1 Size: 165KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE