Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
General
-
Target
tmp
-
Size
829KB
-
MD5
714adc41d77ffc1c073ea4f3d5828afa
-
SHA1
a66bf6d42057d3a160da463aed3cfd6e415080b9
-
SHA256
7845453819c89f24416bfa15744e3625fafb7544d5beb180f6fe02a4d639b227
-
SHA512
1cdb32f0e96a4a2f0b7a86886625f2f489e9f2958f49f2874cb00730475c81c7621590e0ddc4e9f5cb6d575bf46d3a6f7278e14c823c06d58312f64747cbf506
-
SSDEEP
12288:lD6qh8oeR7yYPpMCK2pnA7LO//Vn2mkXoej2S4GgJT9rlLFiNX4xWg:4qhsdyspMCAf6tTkClJ1SNXj
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 822KB - Virtual size: 821KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ