Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
970KB
-
MD5
0d1cace98bc4b91759bb562ded65aba6
-
SHA1
45a60ee53e8cb3a03570ec9600d72ee536b0d0ab
-
SHA256
5b99d5ef6117392c1d73a2a33c0834ee3e8a9856e4eed567908231080d717064
-
SHA512
6fa57b21cc8cd22cc3f0a2c8e3a8e9a75dc572b46b54a83bccdda95072611b5b61c391407a72e3fa49f4ca2f2eac6966986b3356db36ce51e4303dde3e833c4e
-
SSDEEP
12288:Vh/UzDlKOYJebfhuoUFsTzL7A4m6ZU456I3AEW6UPBXV+/lk2rZYSy9lH6mhCW:HUzDluJeVjXmaoBqiBFBF6qCW
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ