Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220901-en
General
-
Target
tmp
-
Size
583KB
-
MD5
84398cdbd86d7f2e8e9dac72ac69c81a
-
SHA1
1191132ac2714aa57b1f8c8ff51f65967dac357f
-
SHA256
a04df39d9bc9ed9eeb8d07345e37d852f799034c64ee831aad8a03b47d933464
-
SHA512
d44effab5c01d187e62fc93565f634ceef83e19b90aa4ad3ffa5b1e6800311a176243920e3c0edb41087d8ed9247f171b5095feadb6c224a986f9bf6aa373a45
-
SSDEEP
12288:/UCUF75eT2ASnTfe0zvii89cW1F+vDuRTYCOGx3WcNT7PEBUI+oqBCBVmSp:0Z507MTfe0r7q+vD+Tn33JNT7PpRLsTd
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ