tmp | Triage

Submit
Reports

Overview

overview

Static

static

tmp.exe

windows7-x64

tmp.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

tmp.exe

Resource

win7-20220901-en

bitrat quasar yoworld aspackv2 persistence spyware trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

tmp.exe

Resource

win10v2004-20220901-en

bitrat quasar xenarmor yoworld aspackv2 collection password persistence recovery spyware stealer trojan upx

windows10-2004-x64

26 signatures

150 seconds

General

Target

tmp
Size

7.0MB
MD5

1e5e25ae0b7ae0990dfac7d92a280213
SHA1

3202d9ba9cc4a372b0b48a82b22a97fd7576b5ff
SHA256

5b5df0d2cd1454c347a973e5278c8289830383bf937afa7c26b20426617f2462
SHA512

da5982c4b95449fa0a639beda9bcd1d86bda997a56c69a2e6358ea378b54ee2b2be18030a4ac6f563669da2cda5994ceba83b3ad02a701ca4e56ce51a4d1cabb
SSDEEP

196608:7mA20NKKI/0BfjFj0U5mEqddH/qW907NKHBk/alv/bgNTtNalBMskBQFs8AbA9mv:7T20NKKI/0BfjFj0U5mEqddH/qW907NE

Score

N/A

Malware Config

Signatures

Files

tmp
.exe windows x86

2a2a662be9dffc461398e7c94d0b55b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

strlen
malloc
fopen
fwrite
fclose
memset
getenv
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

CreateProcessA
CloseHandle
SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy