Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230621-en
General
-
Target
tmp
-
Size
11KB
-
MD5
f477a245f6210571288567eb72cb765b
-
SHA1
d669b1554bb1b459d9d899aa666b02089235fef0
-
SHA256
c3021c219b083a8e90f7d14bb1f3195595da71fcf27f44781f2ccd82f6c26a07
-
SHA512
594e904c1848d4e23e24024ee604cc0cc197d2d96f5694b2f894c8897b13485e9ab3698d9b7a6014e5720cd83673167650adb4213db676497573ed9df9296e07
-
SSDEEP
192:eG/pKoJmqtfk9UB6EMsOeY2uYZctYcF9DWVz03KY:v8o3fky5MjhgZctYcF9DWVz03K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ