Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20231023-en
General
-
Target
tmp
-
Size
200KB
-
MD5
588ee086af45b691d74b7fe213b536c3
-
SHA1
564dc3945b2d95021e6ae0392a05fbb8f4d2fb7b
-
SHA256
4879440d6baaf0a34253ba1e1c8df29ac9242aa5cc05dd3e0a29be154c1c7ec5
-
SHA512
95fdce22aa02087106a5b7c72ecd1e109d3ef430d9b7043391289b28ee1e8d48445e1dc6a345bc01034bb417577ef72f1eb096d1d173b39c591a03b5d81c9353
-
SSDEEP
6144:tDDiYcwyRzSHQqttTZSL9RVk7B5Pr9LBLf5oS:t9cwyRahBw9R0PpB5oS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Mxx0 Size: - Virtual size: 692KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Mxx2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE