Are you a trying to learn how to decompile this specific sample?

The inner file often uses a double extension (e.g., 1938durr.exe.exe ) to trick users into thinking it is a document.

I can provide or YARA rules for detection if you provide more context!