Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
General
-
Target
tmp
-
Size
549KB
-
MD5
da4c79f61e41baeeefb1c8653e8e271f
-
SHA1
4f01bf86b087f6951d5822360a53c4f5319ecf07
-
SHA256
438536b11aafa429cb30bcbcea58cdd24ec138c0e9986991d2869f259618d863
-
SHA512
9a3f0efa56995d9d8754696777ee658597d67a9c4c34f6aaccda598212d6c3a776c4b23d0fbb024a8000d6527d801adfd10dcc488625ee262945184fa75f5cb2
-
SSDEEP
6144:ylLuRq+wVpzEK2qWAdfr0yPhcMr7A/BmyanLsQtDSay8P2zMOMA53Xh7l2vE:ylLp+CpYKSAdLvnyA/k8Mfh1
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 425KB - Virtual size: 425KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ