Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220414-en
General
-
Target
tmp
-
Size
612KB
-
MD5
bb199d90682f815c0cdbd859bc11d50a
-
SHA1
ee9367c8ad5311f895ea235d5aa8ac1eea743ee8
-
SHA256
42a73705f523969e6f1c3831ad7502c461ebf47bd6dbeacf76dcda6fcb00df68
-
SHA512
7d86e638db65af14f6774929deb880afbee72fa55096aa11a155f50b28262d3b865870ae0db88fad5d677aea1ce66e1378668346af4f505fe44e257b03279f01
-
SSDEEP
12288:IL2GrPEneKdFeqWjsZ5uEd2iN+cS9MUKZVLkKUdLEKq9dXCtXiZdfs:aKdFe/W5X1PDUQV4RE5dX3d
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 610KB - Virtual size: 610KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ