Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
General
-
Target
tmp
-
Size
1021KB
-
MD5
73d59e20606111f7f49a05d7ca6281e7
-
SHA1
e7fd921aab66bfd2a9b3f0af0cb33688f6497a9f
-
SHA256
27b6df5c02d5ac7172ef528b4c0d2eb08ea372b602544a6d0f4c754a9e33fa91
-
SHA512
2cc5bfe46a3b515ba1096763dcef2a32d145fc7aa8424e4d97ca6ac434ea1c32c2cf8c9540dbcef7c07b0e5b48b4b81e2a908deed733d75c1edd8c1943f216c1
-
SSDEEP
12288:J3zziy2sz74Mx5IrmehmAjDOAWjJWgVm86o211gawaC/3sKDdn2CTmDUxrg:pqxs2bLuASWgVc311gawaw8KDV9Txg
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1002KB - Virtual size: 1001KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ