Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20231020-en
General
-
Target
tmp
-
Size
1.2MB
-
MD5
f6b024005988370ec4ce05869f281e35
-
SHA1
0933edab25376827b8c0cfaf451181f3e6cd42f4
-
SHA256
3756b23ef7551900ef1532fc6f95725ad0f295fa3098cd25e66623377c04190e
-
SHA512
8d63fca5595a0f324ca03347297ced823a85fc45b699d34fd8e7e5816c2d0c47e416ddea6cf84889c2208efda7b36d12be87bb23fc4e07829d4f86a3c3caf06f
-
SSDEEP
24576:NzIF4WqKHijIPFpRfdBoAzaUIkTAAq+xy8A:iompenUAI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 892KB - Virtual size: 891KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ