Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
8KB
-
MD5
2923754d0c7ba32c0b6a7e5e78e832b2
-
SHA1
b8575b04a53a8910be59d6036eb0c311dce6324f
-
SHA256
7701dcbc681867eadbe92c2408f5fe6861864e4b3c14dd65a9339fa84b02eb5d
-
SHA512
623c87229fee85389dbe851c015c62922d019073c676df1edd248b97fa783b7e20b9611ed6a27990bc23cfa76c1b242d60688d67b2529d32ce7935c00425cd1f
-
SSDEEP
192:OH5U96eqLFLGL+I/lGXxhLklncPcWcCKwtasAa:rZqLFLGL+isXPL8wyCKOasA
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ