Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
493KB
-
MD5
7355d6ecc32a028dcb114bb2c027432c
-
SHA1
86941e19108fa3aff7ff510e1275bcaf27084a91
-
SHA256
c6afeed7ff680c9dc515923bbaf9eafd968ec628ebdcf1b2b02f0f99e4188968
-
SHA512
7323fc0bda6b1620a283ffc6306b4609891101a36de10879be9790b089d42eaed8b70fa98aa1f5c9ff6d29338932e4ddb30ca3b6447808ce3607e9870ec8ddc3
-
SSDEEP
6144:qnXc466aw7c7ogHCLsi7YaFrZdPzGlEeXLf8QEFLkZV8L0l5oPGfP0:WXc466h76osxaFLzG3f8LFLkMY5sGP
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 476KB - Virtual size: 475KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ