Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230915-en
General
-
Target
tmp
-
Size
186KB
-
MD5
9809924a1fb0082898813c23dbc84b24
-
SHA1
2ed5dd6107be77a09812f45993604ed496417d0b
-
SHA256
8183f3d03aabd24f00a14cdf4bd6e88c946bc3d2a17ed2368792426d32783e55
-
SHA512
8a244194152e98bc9839ce6246b78b82e909a9f2b31582a021644a86a3ae03df38ab688bd4561d81b9afcfddecb18b555d24a7d623d8f718eae3a62d56d15ad5
-
SSDEEP
3072:OPUq+jL3rWh716RfGYSeK95YWX2PaAlN4eT0FNaP0hBUxY3rC8XG4t7hXs+cCk3X:4K/3rUJYSx95YBfSrF8OaiusG6hXs/H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource tmp
Files
-
tmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ