Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
736KB
-
MD5
a080aa8ec573c15f68fadc5c7305891f
-
SHA1
647232c78788810c772b6a8f733c63be67ae0be9
-
SHA256
5b418cd4a23d818fe061c6a7ddf0bd6c621303813d2889ab235dba859bdbd03e
-
SHA512
057a06608b918b2476ab8eb584f11a13614c76ebea5341ec45c07676bea9913782eced73ccdc0ef2acda5f2badc53e11ba89765a552b5f6c2b0367f6804c5d1e
-
SSDEEP
12288:QlKOHeouHH1JJ2iNXu2iNjkeIy7MuTP8ARQyP0q80+AnThj0eA+JlbsaMvwFGfx:edu1j1A1fIYT6s80+aThjvAieFaGZ
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 730KB - Virtual size: 730KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ