Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
640KB
-
MD5
bc06a6b9bdba4a01c0cd24765976ecaa
-
SHA1
35185ce0578c8e59ed856c1b0d9b2d1ca7597984
-
SHA256
c0a82f244bd231515fa2e57b9d42987a669c1e94304c7868946fc5b71390cca9
-
SHA512
22173cac214826682945691493a5162e1cf919b9504187da1c1b7851b3da0aea0edd0fa65a07c09dfcd0606d3cb9ab5da7ea2baa8eca21e4185955ae2c909e4f
-
SSDEEP
12288:j1bui5b7Tu3XDG2hMDxV9Bp6TYRQGV3f1VoIzhx9xBfw8X4l:Yi5H4G2h+xVZ6sRL9Vo8XxBvu
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 608KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ