Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
General
-
Target
tmp
-
Size
786KB
-
MD5
c2f01c67a0c58c003471e245e1f57c8d
-
SHA1
89fe34fa4f3842bed5a54d766ad42f4ec2c06388
-
SHA256
8eab152e98f112c4706065bc1019945d06578407cf72b44db8687e8cdb2c7643
-
SHA512
9721edb7328d6a1d47a3d7c3f61ef075f29f156c5047b23281d5eae70708bcf17933a53f2adf73e0161f18b5231681582b92092ab24243215b86bab313ca3894
-
SSDEEP
12288:bxpfM+1PibAgwTxW9/cPusEOSBQdxPQJP3Pt9ssfhSoXFvbiopuVkj2ibgJCZF+o:nXqeTYNOJEa7+PtFfhSoXFvmE
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 783KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ