Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
972KB
-
MD5
0e350b8d01ab7cd3a831c547f8ec3781
-
SHA1
7f64f7c768e7713768f6b86ff29cd7c6a45d7bee
-
SHA256
4002e586708b06d736116dc9a9fb158af379f5347f8650ff452245b521eb9a18
-
SHA512
15429f6b5dd2f74f490b20a3fe329bf40ece7a9b9314add36d1154c61240e01f81393bfa35fc35c195212ad12853e8120d7e12e861c6537fee004bb7bb7b6956
-
SSDEEP
12288:hzYO3TFRk7YGtJijY9lVIDlUOyctbTC4J4yQkOckGSsvFxd0K:hMO35RcJ4YTKRhH9lLLkG1vFxd0K
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 963KB - Virtual size: 962KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ