Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
1.8MB
-
MD5
df246b090d3bfbb2173383f7004c69c3
-
SHA1
edc78b91f4f479c3ba5a5065ae1b3af951a33cf2
-
SHA256
dc62e7b3be88315db2f2c6e2c823118f3a31066206f939f13aa138e97f08d5ee
-
SHA512
af46d49e681483b4ff6618e5c64a99800316e635a29f6309dbc3f26b08a61c626a9f0897d5db5f510c83077d7120bfd2cc700923b8b846a4ea19f54e7d5c9f2c
-
SSDEEP
49152:PTJ+0ntZXkF49TvAkx8qhwl4u2fLcmcaQEd/NhytffiPnrPV+Itle:g0XXkF4RvAk6qhYNcLcpyK1G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 955KB
IMAGE_SCN_MEM_READ
VIP Size: 356KB - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VIP Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VIP Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VIP Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ