Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
General
-
Target
tmp
-
Size
545KB
-
MD5
c5bf15a5bfdc5f200441a7e965be6e9e
-
SHA1
561cceffbe5a18f3b5b9f1fc4ca94005be1d19fd
-
SHA256
25ffdb0a1ebcc08891d66b6090cdcd183b4426169873fc7dc9f6a1ec4b866148
-
SHA512
2ce8c4e691e0ab479596ff3257c83525e7c182590b44a57b34ba684e9523bc1ce3565cf4c778e20fb0ed9e8be2f2edd3dd21baf82b783fcea2ffcca913180456
-
SSDEEP
12288:u62iNZEn27lG1ZkV4yZAqELv7mUjoDFoGKYdj/PO1emf6Dlt:Z1vjQWTCJUDFoN6j/POoo
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 543KB - Virtual size: 543KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ