Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
General
-
Target
tmp
-
Size
953KB
-
MD5
0bcbc01a853407b36ca35b1c51be5f5a
-
SHA1
857170d499fa5dfa3d0e1503cd263ab12746e9f9
-
SHA256
09432cd10fd7ebd576a0870608766e3a31a9f7ffe5335ab22b044b51162c6fe2
-
SHA512
a3b6c0b5274ef91e38d71d7661a266dbc75ec247fd017bc422f56eba1b0863768447222563d59afc76eaf1dfb13222ed289cb591dafebec41be92e7c7e44b1af
-
SSDEEP
12288:GS8DL7HsjMooHQYuKI6w9CU5yVNrGY9syQZr650qMM8:r8Dfg8QYWXyVoY9sygr69+
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 941KB - Virtual size: 941KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ