Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230703-en
General
-
Target
tmp
-
Size
1.4MB
-
MD5
ec74494996fff290b22f397e7ccef558
-
SHA1
f00c965257909e7354b167cc4dd38d86f65dbd25
-
SHA256
eda980a65869f461899848985f7fb8ab7d728cef00449deb70c6ed3144ca6799
-
SHA512
5929ac668d9f89c9073fbdf4abf6c39e01391fe1314d9c762eeb1f7e34fa25bb171d6920c8c60b6234d23b5d5f2b05c5cc5c2bfbac0d8608d4fd78d5e1436397
-
SSDEEP
12288:jaYI9C6i5OANf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cHq91Si5OA2:GA5ddXNL2PVh6B+Bzjmc075d2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ