Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220901-en
General
-
Target
tmp
-
Size
245KB
-
MD5
de93a55f646cd1e6c317365db8561d16
-
SHA1
d2018825de87bb722a83c38f3708cc5360ac903a
-
SHA256
b2e31ed9833299ec3c166877db92ff5d477858f5867ca5494b26a82558e4616e
-
SHA512
6390bbc3db75eb2e8f6812f89be17efdba29d2c9b0c2b984851f629322f1042c6c684f45e5fd279661b95126257fb416dc7910c8e07208236051832e93d2db64
-
SSDEEP
384:77/k+XBcW0kFXP4WGzvsuj8Sf5dCuEMa/qunCmtJdh5R555Do:7X70s6bdCjquRr5R555c
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 241KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ