Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220721-en
General
-
Target
tmp
-
Size
6KB
-
MD5
2077e8080a5f540e281242a1b475f865
-
SHA1
b6e2e18a6a3574bab7f17185dc0b00da1a34a95c
-
SHA256
04153178e5f9f669cd1c89d653d45a0431d46ff5e9dc6128522bc02aacdb9895
-
SHA512
4e2bc30f93fbc06302fa29efcc0e5d164bf533dcf04235d2465863536d8fdd249d583555453836dd3e76df6d6f79a511185b9ef936312d6f25d8d89eb7b58f91
-
SSDEEP
96:Yp+E3tFRfLlXRdIG3nCKen49w4fpQtEZ6I/cbUSW5XzNt:Ypv9PDvdI4be49fyK4ITz
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ