Static task
static1
Behavioral task
behavioral1
Sample
tmpu51tsomm.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmpu51tsomm.exe
Resource
win10v2004-20230221-en
General
-
Target
tmpu51tsomm
-
Size
815KB
-
MD5
86ff9a4580a4c4a2e23f244221cefa7d
-
SHA1
543a6763009084a470a0406564eff292cf87b75f
-
SHA256
48d71e4f7500366d3acb5d62ff981aefaf8cc2df9b53bccecdaa952645d74169
-
SHA512
04f2a0cf90860130aed668aa18c3af5c7a22c0de12d3bebb8434739d76ae4eb9ac74b222fce3de820466a0c21afd01a9e5059c96d0aab69cabbce7a81413a46b
-
SSDEEP
12288:D3eL82i2iNbDN25Tph18zehyPduxBdZPMFbGtsP30omwHlYSatgFkbdyVgh2eVvl:D3TV1aTj12LundZMZG6P3ewHlHwguf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmpu51tsomm
Files
-
tmpu51tsomm.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 812KB - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ