Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
754KB
-
MD5
c96c907d902d662e80bfe4cf0badc643
-
SHA1
1905d263490330b2b4ce09150f38ddaf804ebc12
-
SHA256
63003a1d2a2681d119288b4cbdfa3e0b0248644336509b657e0fab1a4b364e8b
-
SHA512
8412f07c71d0798fd3ddcf92e0b7b95af145fd6369848438e4c94aa1fd3a0a2866c4556f603b441dc59b1b53b97393fc797efb7989b90484a121a36ba55c3159
-
SSDEEP
12288:6t9qgZ/ziouHH1JJ2iNgkejwFGfO7XRCRDYxSyv5ndMn0Ueb31EFUUi2ditrS27V:89NZ/9u1j12eGm7XsRDuhndMtebFE2R9
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 734KB - Virtual size: 734KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ