Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
505KB
-
MD5
c234c560ad2f1be641952b8eda22c875
-
SHA1
38506e54931e571ab7679cb214f6a6ef320e78dd
-
SHA256
2474b37befc1a431b0f62675bb10d1bd2e29a709db37ac3aa0595fd5f0821c3c
-
SHA512
c13a1355651eec4e1d7171f45fbe081a8f152c439a644f2a37054c3bac6d4b3ab31674e001ea1ebbedb0dba458814776c52a8b549cc4f7a6d39be11a2b7e1460
-
SSDEEP
1536:ITCa/+EYjHKhqBy2jdHZUmp8fRW/soJxgSRzu6FZq7jEYjHKhqBy2jdHZUmp8fRV:qCa3YeWxlqEYeWxlqXBIrVdM
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 486KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ