Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
General
-
Target
tmp
-
Size
922KB
-
MD5
28ad0eb6f09a90cf169b528c0bea75a9
-
SHA1
f350e36fa8d787008104f1ebb6255431d306af5a
-
SHA256
a3d70f4e3daa60d13fb0dcf5b78820b4f6de6e709df0beacf6ca404ec196a3fb
-
SHA512
4d2db7d0f539648aea0227579fdd4b3b6621c079df94fa182eb14d7660815b04a8d4a6fda5c3e87673943e87cb2266ee65a3e344d5c3169f543b39e680acf89a
-
SSDEEP
24576:y2oYbLlPahyr0XqocKkMro3LKB///xRLHAWvL:y2oY3lPahy4XIM8bKl//zA
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 917KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ