Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
4.5MB
-
MD5
74ae5df68e133e9f312d191beb52d302
-
SHA1
7b6e738efcde3340db51bd4fa19b7f0576e228cc
-
SHA256
81afd195e1e7ef6a3831c762b8017f7e870fddbd049479c4811c80892cee1288
-
SHA512
eac332aa1ffaefa0583d694a66276b52bfd04d840e2d1b925670d16587ec486ae1779cccf9ff8b8c0c35d12f07350590ae226ae47e7145a6e58c7bb45a6bf8fe
-
SSDEEP
24576:FbbjdIy6YrN6SP+JXOXL2bERei6PCIraVuh75jO1IujDFb3uMTVTUP3BUJSBNkCI:
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ