Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
General
-
Target
tmp
-
Size
507KB
-
MD5
d7e3c43afd6736d96b99719ddd98aa44
-
SHA1
568b671264b38c3a04adbe345694d24a98048d91
-
SHA256
13f409b60b9a72911c24840af2823a357783ac42298b323c098263d99e03efaa
-
SHA512
6bfad217c196fe17756b1bab27ced20a37b299d34e5c9a84c4f4cde7af7bebbd89dd0b5ca86fe1f820b46cf8a7d9b9c02453e30f2fdf78ebc51a68d8747ff658
-
SSDEEP
12288:TVXRX2evs3MswBVOKmbFDFzSTlT9crjY9cEjkBv7sX:RhlveQCKKFDFzST59crFvA
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 498KB - Virtual size: 498KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ