Static task
static1
Behavioral task
behavioral1
Sample
tmp9vb09_6a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
tmp9vb09_6a.exe
Resource
win10v2004-20230703-en
General
-
Target
tmp9vb09_6a
-
Size
426KB
-
MD5
1062893523a41113f637a460ae257fcf
-
SHA1
5030485b201cd3f4ee7355bc9e1722fbeeefe668
-
SHA256
ce8994715e43e82ec8eec439418ceef0fff238c661f873b069de402360bb671d
-
SHA512
460632c6c8dc9ed4e2c50f604cd11c6637b79b1e2d5560864b80839ecfa85283e69b75ed9730c48a5a9fd271efbd9b40244165ce41f3b362476a907598807df1
-
SSDEEP
12288:I/IMnZd7R4E7YjOJIVzmU7VXX4b4VqafQrD4zKTC:ExZFP7YSJIVzmWM44GI4KC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp9vb09_6a
Files
-
tmp9vb09_6a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 423KB - Virtual size: 423KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ