Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20231215-en
General
-
Target
tmp
-
Size
12.3MB
-
MD5
edacebca2679e2ea7d1097edc8e5ad3d
-
SHA1
087dcb238e060c0f33090810bbac4a90391948c3
-
SHA256
de3ec3a6a2dcceff11da24170fdd0aef3bfaa7e0cd27d51dd11c9a1473e488fc
-
SHA512
fa867228aef193442319f7a544f40d4fe5da8f18e527801cec285e184ade2d617cd721a29576fd2c49fa1009a29e03f6dcdcf989a1457c80bfe6a46b66064494
-
SSDEEP
196608:oez5vEN5HDT+ODrpc1lv4tdgKLvM5Pxox06nxM3qYPCyVnzZiUUsufJ:nyTUzwtdRLCSO6nx8lKYzMUUfJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12.2MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ