Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
18KB
-
MD5
0ee00562616839e5b0640d41e3111238
-
SHA1
3c0c0a7f2cb20b708f0822b4d9c5c09de9869af0
-
SHA256
f0f3d9b21379c3747f34b1a7503cf637824bb939ba0b24b3af4742bd944d9b90
-
SHA512
2799996d5ee42e228191e64c07596df64e4aad3a4036ec77a89ee794b9f0437e3ffa610481a41e809c78bfcc0fea587a18a4166b9f0704608a6179e42d7cbdd6
-
SSDEEP
192:5iv14bhNB+RgaG/2aVK+/BTaO5lx8Vm5kk1m9r1jKmCGzFPNc5UFZ5UhKNPNKPjo:5iaPcqgF+kJRqGzhqYbJNoo5cRp9xx
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ