Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230831-en
General
-
Target
tmp
-
Size
626KB
-
MD5
b1635f0a98ef8519984bb3f9ef1979f8
-
SHA1
ef247f07d841bc68214c37597cc4557ce8b09ca2
-
SHA256
be8032937b016362c56bd7da1fce8a127af3f1a13839b11a96480a53f0d548f6
-
SHA512
e8127ee5acd14d85048ffadd764e81b3761db25f77778e2013bce358f499d896770fc82b37f8e3d280018c91c06cd3300c35fbd473ff3c7d1c8c9b746fb24e92
-
SSDEEP
12288:JVj3hLQvfdxOo7gpXtrrF725O3CyIKvykzST2YXMq2bI3cjhyZSbR565SRE5uPPC:ZMCjIKzzwXzTayMbq5X5APE1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 604KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ