Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230703-en
General
-
Target
tmp
-
Size
13KB
-
MD5
6f665047f3ccce8c93bdd5eead1318de
-
SHA1
4fb59980a15ce7974a796575b762f8f422ce5b07
-
SHA256
4a4f33afe3086aa1962d92412fc2166c5e6b565087bbe20cc411dfc0e9ded6a0
-
SHA512
9f75539aaf916aee5d20126bffdf480b1da6a260f946bfca59e981d6ee4ca33eb7a3479e879a0b02d73fab8b068617b0492fd07e8bd972ca46bfe8377f543236
-
SSDEEP
192:e05nsnX+MyUY2NV28bBGnV87xKh8OuAU1OizJRRk1FShS7:HxsntyUZNVRtGocHuAUrzJUShS7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ