Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
896KB
-
MD5
a7b1a64d39f0697de1140422825f6def
-
SHA1
53311c5cc42775c0aa955b99c1d0d0a1eeef11ca
-
SHA256
dff1be25685dce9a04eed984574e549aa47483b038e99e6854e1f7ba683fc897
-
SHA512
fc84948ca49096b17cb10701154c8b00275ad1dad47091bd8889aa1c5926830f75f867466159ff6761770a6cc531e327dae1c2cb9853e0615a4ef8fc1938a41d
-
SSDEEP
12288:mNvpjxK31dxk8i7CwhuJeKJEtyS5gwgGSR0YLESIQi868N7czps7S:otKdxkP5uJeUEcS5FSR0yEgioNws7S
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 826KB - Virtual size: 825KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ