Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
General
-
Target
tmp
-
Size
812KB
-
MD5
909d921710d0a5bc4ddfacb0ced137bf
-
SHA1
fdea869c122579b91b37eb9c30208645191375b1
-
SHA256
f2a0159fafd3bdbe6b457f8f724e142c8cfd9cb0eb02b508729cc7e3c42cf593
-
SHA512
afc37126846a38d7118fbcc44358f4b9d45a3ce5ad4fa4b1ef7ae65660b05cf0a3ca7f39a2da09eca5ac55eccdf09ea016ed076ee66ead0232b49ce0a94b68c2
-
SSDEEP
12288:9RWl0W42kA3TOGU2ybvNTjhFG8KBvqKT8B8IHhp2TBS:iw2kQ6GTaFGDBvBCLBpAS
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 783KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ