Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220718-en
General
-
Target
tmp
-
Size
612KB
-
MD5
0229fa24ef686c20e6d50c5a75aa8c27
-
SHA1
07c4fa01089a3275f88ce4d7fa404040ac638c35
-
SHA256
9696d3ec13f85ada39b140ae0096e765db0ff630f351ffa1e96484f6a4f2f030
-
SHA512
bae11a5fa3b52c577f815dbda2aefca1a16475fd694cd62684dd31b6890731f14f1d1a3d147f5a159907b4e7e7dcc2cf5dff80b96a5e2076aa4c5cf7c2b56ca3
-
SSDEEP
12288:t4nCokpVcHBePSVM+qK/oF8hcBptXphk+MHdgdEJhL5Pequqxu9L4sp:t42PcHBZZT/+ptg+MH2dEJt5Wvq2L4s
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 590KB - Virtual size: 590KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ