Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
2.0MB
-
MD5
bf9ee936e45c43ab62ee394bca1a885d
-
SHA1
f337e570a29985b0b6f13a7b66f1508f2a36b976
-
SHA256
a2f199bb219fde029fc088a6002f86d729d87cb0368bc75c545074d51033d98d
-
SHA512
e3aa7afff92dd946d4c04dc90e89b614ef20b84f7eec1ac350aae39dfc984081bdcf0a72ca761cfcf420b27997432e9ca9bf05ad3a4b3d184bc04058be219597
-
SSDEEP
49152:Couidwwr+6fPlwRwLG1zLZGMSwwmqcsL/jIbJVYI1AOmy:UIrVeRXtnSwwXn/jIbJiIf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 166KB - Virtual size: 118KB
Size: 268KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
Size: - Virtual size:
Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
Size: - Virtual size:
IMAGE_SCN_CNT_CODE