Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
General
-
Target
tmp
-
Size
804KB
-
MD5
e5be139d443ab4505ee9f36d0fe820c9
-
SHA1
7d4efee606833796adb24d5ad7c68b575445a4d3
-
SHA256
380f94047b6ed93465883445faf556d4311517781011c79dc8ca2ca9517c07fe
-
SHA512
e486c42fec2457dc6424f96cd734afbed909d3f743cda0ea299184a0f519a01a29320b13e734832490285f227ecf28b2647ac7df92c38624c606420a99e9cac2
-
SSDEEP
12288:T7KlItqmombvw4k2AEy8jVomvln+bVauR:OqFzw38KmBqB
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 772KB - Virtual size: 771KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ