Behavioral task
behavioral1
Sample
Artmtm.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Artmtm.exe
Resource
win10v2004-20230221-en
General
-
Target
Artmtm.exe
-
Size
386KB
-
MD5
36c180da80ca179dc301ca80d896bcca
-
SHA1
ed84a347205b0b241dc57befb1e7160c952509bc
-
SHA256
9337c0a38fbceb68a0fb09e6631baebdb2687d8b18cdb35a2c653f783cee92af
-
SHA512
5eb77b13779c69db171e62e8546c9807da0ba28556fd001cfe002463002bd1c1fd81bcf9539761b0da70e907c4af80614d7d60d666d8660d625317e399ab0932
-
SSDEEP
12288:HsY0U6i/dnV0KsfzyFBC9ApwhZoSWcE9dEd1n7GL:H36ilVmUiGM6cE9WjKL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Artmtm.exe
Files
-
Artmtm.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 258KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE