Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20231023-en
General
-
Target
tmp
-
Size
1.4MB
-
MD5
ac2cc62303c0a6eef00a87447d3ce0a2
-
SHA1
dc9144be385870432d216b83b8775db0bafe74e3
-
SHA256
d7e865078cb9e5f7d4ca39d4dc6bc14d896d05f16e2304b542f1c516e3006059
-
SHA512
5261f491ca8a5566eb5a94ea5405e7a54c76ddd39f50d8a9dab8cdd38bf7f9a060ea1f883c8c6ce8a044f638778578403a4e40b97259be98226a583848425818
-
SSDEEP
24576:MBuAJPuD8eb0n5ctoOCrvtJJewO+sMagI2IaU4F1Y2a0ARn0:MBuAa8a5460
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ