Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
2.6MB
-
MD5
12586782b445c5e96ea62926e4bf8b0d
-
SHA1
b76ba69e70d33e4805c18797714625386d0aa080
-
SHA256
88ccc4248e8e2301c4ddfbff92e00c4ab2112e672a7cf09d7059292499a5482e
-
SHA512
cfb509fac0772aaf28c73c2fb847c9a64f05cae5c289c7d77f9baaccc1fccf3e1cfbe96ecd68488a7b33d6b4a8d9711e45786a05890dd67dede13f2a838bf202
-
SSDEEP
49152:3vLUOxqzqEjI2Qhrm8zOckBj+2P7qxk1Ht7B71uyS9obyI5ex3:3jUOu5QhLzEBjPEg7B5u0byIwx3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE