Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230712-en
General
-
Target
tmp
-
Size
554KB
-
MD5
b1e784dedd19496bd2b9fd18c6bcb73b
-
SHA1
b2c0bc224198dac8958548c5f81fdfd1e375a515
-
SHA256
20f578ef0a9de9f7cee37363e16c9ced75e457fa895b091a6c013f1a0fed3b77
-
SHA512
50edb2d235bbbec0a3afa9a9017b9a9ffee2485ee63d1d90686f5a15a0b03ff20abb67d42143af4bc6aab444d7ebb6374518e8f56e8bf7356d72acff027e5173
-
SSDEEP
12288:/I7fxKRXxU40Jqx/LoP4pWs5PrvqOV3xq+lVrbDAgDhu/IxoS:wdm24Mqx/7ZLVLvR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 984KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 536KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE