Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
General
-
Target
tmp
-
Size
940KB
-
MD5
ab67af3f27b7adf76ff434e6453f6a6a
-
SHA1
7d4da84c7d7a5dcb7b82728f56db5bb8e517b37e
-
SHA256
93bcdb1afc071741596859d2a432e02a7a9f008d7c1b7e09d06d48e18069e81c
-
SHA512
1afb279d4f754dc8b4040019767fed8186cee69ee285c78d7dba0ad38117225d921e7eaa60f5f3ee2d12d1bcde52a415de37b3b044bd21934ac104f8558950cd
-
SSDEEP
12288:w6MxERSsjfPid7+QMJii4HKBGJ0cLaFCxL+El1tW1/T74/aZrW:qBM6oQbdHiVcOkXt87Qa6
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 923KB - Virtual size: 923KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ