Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
847KB
-
MD5
e3ed7de364327b3dd5d9d419d00c18bc
-
SHA1
7584d0200a27e7fd5fecae7b48c6243151e3f72c
-
SHA256
397664877d247f7eafbf36c917d6a619e4032e1f04da16c6211e3f8f0a6f2b0f
-
SHA512
be17200b373f49ad6c37594a488d8714e310e11d6297651105df879b90e90e2533a86e46cb7a0a192aae600b09970347d36980f6b156201a671a6a895e7c578d
-
SSDEEP
12288:Xp/zznmXr//NXMzHxnjjPTAZfYQeAQlQhfNbN53hp6Vtl:9Cb9czRjDagmf57h
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 842KB - Virtual size: 841KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ