Static task
static1
Behavioral task
behavioral1
Sample
tmpk39_z90w.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
tmpk39_z90w.exe
Resource
win10v2004-20240802-en
General
-
Target
tmpk39_z90w
-
Size
1.2MB
-
MD5
7c4d4eab0d344f857aedc257e94fa0bd
-
SHA1
c895b297e710b3782cd3577b7c1e508e8f7509cd
-
SHA256
c79e95b78900ab010b1304d3054f84ab2bb5e2e9d3b1e760063dc668e311c2a4
-
SHA512
01cfb4a837f3cf1197a6a8ebccfe8b42db04581090e8f29747456daed16ac67a6b4372bd4bcdda1e7c38ec348105fee9a613b33ee53dbee7ce3cfa5adb8af0d8
-
SSDEEP
12288:75RZq4V3xwt867Dvq/XWBTmMVCnJNFAlGvGHcgFknHteA9j:xV3uL7DvaGmM2pi18LnIA5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmpk39_z90w
Files
-
tmpk39_z90w.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ