Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
573KB
-
MD5
567d70fdc169383a39570c486caf7370
-
SHA1
73225cfbe5b94ea44f3decc712932df269f246e7
-
SHA256
e9507f9f12a1a8d71e701e0b35fc2c6b3f44a2be8654d180c4ab7873ed1aa53b
-
SHA512
a2b859bffff1f53ee24d7e92083183ddac5fff045353bc5b59f4453371940aa8c59add51d6abc1a937729b182d3398b426dcbbde773592520453f12eefcaafa0
-
SSDEEP
12288:LWFY2qzanH0iGImAnn1cWuQ1qq/QPzhuAOkzpn0DffuZYSe6AM2UP2q/1z:LWd8hfAnn1c8v/Q7cXWsff8Yi
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 570KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ