Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
1.0MB
-
MD5
da36a543d50c379235e1235ef1a18a75
-
SHA1
6b873d2adfbb3abaf7a95c383f97dd0e0336ef11
-
SHA256
065d1d90dd9b22bb5a01dcce012898ab29cdb756e4c4c119f3cb8ff83d07613f
-
SHA512
1b264eb0d0617e8254fe55dbd6ec5fc4e7088a187e914372941fd13a5ffdd7a384131bb3497c5cdbbd803f53bc8a09fdd44319dd127a47213ca22437e40f2644
-
SSDEEP
12288:aP8R4O/2z5+nz85/x7eLZ8pIqawY77qIH17tHau4vepRYcJbezuy5VNqmi04LcCV:Ig/l85/x7BFawY77P1hP4vepRBo
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 832KB - Virtual size: 826KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ