Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220901-en
General
-
Target
tmp
-
Size
697KB
-
MD5
14e62ca81e378794b0eb078878c0b8be
-
SHA1
5e2ca8e676b9d42322eaad207bcd0fcbd2c92170
-
SHA256
9ef89e25f98605401317fd551f219e2b26e673f0956ce790c0e289d57ecf52bb
-
SHA512
5f953a0a111950f76b1b1d16abca015eb5e6b1460ccfc0055a6cb720a5794b46884fad4c24922682c2c262db2a817c9b2c4dc5f8ca7b87129764c64218da63fe
-
SSDEEP
12288:txhno0ICm0jzjetkW3ra0p5GBLGvGZT68d/P4hwHYj2krvJN:tfno0ICm0natkKGWGZTt4hw4/9N
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 688KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ