Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
54KB
-
MD5
e9d5ef9208e13198a01788dfb9967c05
-
SHA1
da168befd9d14d6a98cec227a3b123d8b5f9e16b
-
SHA256
0338fb36fe270413770b9a27017349385bfade88436f3bdbe7771901a8553a6a
-
SHA512
4fb8151c5e0a69f9cfc1595cf5b714fcc5e584f9e225a9b2baaf3f977c31af88e4a59e9c3efe7cc769b36cde495a7ff98c38e44568b8f805a938ad03cba343f0
-
SSDEEP
768:AzYvGwudnSUvVXAHmaMJuYcimrMveZx99g8+9Mc3g2Deb/MYyCEeeKGA/wU4AHBI:AcviSM0m/Py+M2GbnoTA4U/BYti
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ