Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230221-en
General
-
Target
tmp
-
Size
787KB
-
MD5
9e6a9345443d91946ef373f821c10a73
-
SHA1
b1fcf68353bfe81401ed48331d6e72cfa3406d2f
-
SHA256
49aa1e6fb566faec8bf991b8feb977baac642d4119b1cbc7f744553c024da97a
-
SHA512
2bbcbdb536f2ad3475f1e637ad09f3125aaa3730385f55cf775327c4c8de8753afc09a0d267cadc410d89f62c5c60b0155a6d8be5757e369eb45de38f3c29a3c
-
SSDEEP
12288:jsFbsfI8Z1gMFVobi/Wv0apPywpyH6KM3v9k/fLHs/qVw:j0bsfI6dFqbBKRgvaT+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 784KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ