Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
504KB
-
MD5
d17a43ab072c3a9179e0e858cee2f414
-
SHA1
f510fd019831a1d8876cee7e9acc0996929f0585
-
SHA256
5202c7eb6982cb8e5448ed41d7b035eae59722bb8c30550df26a960aea00dfdb
-
SHA512
a0134e1d7c82e966844da4760f5fcea25c7d485048a02225f4ae142a9261c06eb84c59a69917be50dc2f7f4131fa31f918c326408dd8f5a3a6fbd994a4c9c49e
-
SSDEEP
1536:F87JpHMUA/+EYjHKhqBy2jdHZUmp8fRW/soJxgSRzu6FZq7jEYjHKhqBy2jdHZU6:e7JpHM33YeWxlqEYeWxlq6UuiucBm
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ