Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
2.1MB
-
MD5
025a5279eebd3f9256c3c4288b1aaef0
-
SHA1
fb1d0d590a0785c6a769b1cd8c93c0331f124ef2
-
SHA256
2b9ea3e17b46bf859029e2b445afd6b14d4e35f95e537053b8bd56225c707f66
-
SHA512
249c59735d812216ff7d090e9bae3ea653cb52904f84eea0b0dfc54387dc08548ff12903d6d0bb8a9e0d7026cfb447cfe1cc7d31a6033d9aafe5106e20d4791b
-
SSDEEP
24576:HkMUzHPIUmyXZJu8SPZsUIiWPjspeBv00mh1RZqw21LNNpgN/cEaaztWuKkSH08L:HovI0Xch0RPmeOZR2/fghc2zt8W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ