Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230831-en
General
-
Target
tmp
-
Size
32KB
-
MD5
40ab49bf9d29824fc2eafe2ae56246dd
-
SHA1
b17776999ce1e8d4c36288ad3569a228a537879b
-
SHA256
d1342d44ccd450b59ed3e212774cadd2031fb6a6535c710e4f316ff006856e69
-
SHA512
d051bbb5cb2aae2e8346f98cbd1f7cda7f9a710f1339b21b57f6c11c4eefa1a27648521269406bddd7e747bafc0faa9f4b48cc3493d618e6b2a107aa90925b50
-
SSDEEP
384:k4wDBXSiH8mcWLLcoUSrBWDo47t9v496u5KD+mdD69KD+mdD6IRQe4h:k4wDBXSicc3lUc47t0md2dmd21e4h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ