Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
206KB
-
MD5
c1e5a42274b59941c9ef3efc0a0056ef
-
SHA1
c94a258d1bc1d93fb18df0a63e68f8bb9b06b508
-
SHA256
75f9518fec42a80f447ec7e55d5216fce2a8728e8ccea017261f0ad11a8c8787
-
SHA512
c9d88d530a53648a7a3fbd1b08c183fb0da800b39fa4b81ba2243688a8c92148726f1bc283afb8f290bba8dcb1d09d0ad02252f7494dfed4081fb39eacc55aee
-
SSDEEP
192:w5cGR+OqYgf6LP8eoU3FtxKLw+hEEuo2gFUhKRe03pDeHpV7kghBRZeoU3FtxKLS:w55RqYWc8eo97EEi0Ze/Zeo97EEK
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ