Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
General
-
Target
tmp
-
Size
577KB
-
MD5
d78c99487571797117f5b679797af064
-
SHA1
85f21e7b740a92a0c019eb8d3616034dab23733d
-
SHA256
44601cd49baf7338c99f5f0ec249cde7954df064dcbbf3ad66b25dfd8ab3f1a1
-
SHA512
ad449561fb61d576798d4f7fe53009ed164cc05d70d0b4ff2f7278fa10882f4ef2e34a3a9bc5542ea76a015c4108f4572e0fd8af0ef5601feef97c77e2e94638
-
SSDEEP
12288:sEYqWjsZ5uEd2iNmG1ZhgZ+pi8AJzzc86P7DKzg7y8QsjIF4ZWDDlt:sEY/W5X1dNpi8+c86D3yJZt
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 575KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ