Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230712-en
General
-
Target
tmp
-
Size
9.3MB
-
MD5
59864646aad488b9666d20fbf6f71ebf
-
SHA1
15d18c17256bb87c9b453930a9e600fff472501d
-
SHA256
071e5cd8f952c5ad05b0ea078dd41285eeb31b5fee9a1d3ffc30d1f160b99c60
-
SHA512
e39ae05b9a028975f004c555fe24b2dcdd70de30eb094c556e6c97b1c68443098f3d9a8e59b4d804aa248613083c19fb9f87992105f6bdb077fcae48cb80d904
-
SSDEEP
196608:QVlTXDDf2aKLfPoJwLVwMvAZW9GeDVI5DKBWZlkgJedYs6LtYdEhqTgKD:cxCHLXoJwLpAskYVI5DK2NNs6LtYdEh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.3MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ