Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220901-en
General
-
Target
tmp
-
Size
682KB
-
MD5
0decf2805e6e65e7023491bd0abc6224
-
SHA1
85a6e7f4883000eb7f2846e0b443e47cbd82ecdd
-
SHA256
fc770cf10f538ed1ee6db0d1bcb6d8119199acdc947730a56b10bf46e0dcb5dd
-
SHA512
25983921f7a67096f453ab4d6aa8511d5e3be4329bab040da80ca8bbb3a2871efeff0e01dc431fc10f496c1bf3b78c7e1991edddd229c11e38d4b7990b089fec
-
SSDEEP
12288:swhuJFQvhzps7BWhSxwzh2PzpmASGsnO4Rrlvyfm7hXMVVcZVuMho:vuJGs7BWhS4CzzSGsO4nK6M/cfx
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ