Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230824-en
General
-
Target
tmp
-
Size
473KB
-
MD5
2943336c37975ca61be6a14c21a4ea79
-
SHA1
e0fe9f7298564d6a59c4f484d835472af7689356
-
SHA256
98049e2403f4f085b054724d745fb7ddef80374d3f87e475fcf0e043d4b43bad
-
SHA512
4250481fae129eb38848c08c96b3f1c50ac1e56f38781bfa64d10712eee4dbe3b8b48d66552a1860bc37108243c7179bc58b1f931fb6ff9f30dae4f2545a1ec4
-
SSDEEP
12288:2SO/0Kkw6EdiO8Bf81JWpqznpsend5GAuS8zXJZQ:9O/bkEdH8+RDpsu5y3L8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 470KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ