Static task
static1
Behavioral task
behavioral1
Sample
tmpz2c3tu66.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
tmpz2c3tu66.exe
Resource
win10v2004-20231023-en
General
-
Target
tmpz2c3tu66
-
Size
1.2MB
-
MD5
6ffe4bac4ff88ce75f0a33e77e552750
-
SHA1
96bd31273006a267b08c5220769fec0677250bd0
-
SHA256
b4e17af67f0a7a0cc41e2a97e2c4b2491592f72efaf1d61cca890c1d76cae089
-
SHA512
03bfa7ed901bf41e4ee7eb056533d39ca7800b258bc186e89cd61606c0fc31550c406c212dd46eb3b8d4cc249c99ae431d09df28278c9d939a58901f61e1d50b
-
SSDEEP
24576:DdlEFnxn1I636fvNSGTBiQDNnA8PsnjF8i8xj57:TEFnY6qldDNnA8eF98xj5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmpz2c3tu66
Files
-
tmpz2c3tu66.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ