Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230915-en
General
-
Target
tmp
-
Size
954KB
-
MD5
11fdcaf615332cb1a99bf3134a4fdeac
-
SHA1
8fd2c15b01faeac0823cb84056472400ff0ba109
-
SHA256
599612c8f6e02f71f3d69b855ff0190ffcf6a7bf1f5260640864113d884116ca
-
SHA512
87666353a13f55487cf96b55563e3f4da4cd00cb2c3e5014ea953a6204e95adcea55cdd78c34ad63058592f32eb574a86f2ab54a74946ebf9ffa638c412d4043
-
SSDEEP
24576:ChkC7smiqdgxnllP1OWBH6G4C1yeAnQ51lZmbxcn1NXf:ChZ7sk8nllddF6G4CwbQjgcn15
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ