Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
1.0MB
-
MD5
3fd686dda4278442282f8789505bdfb6
-
SHA1
15aa3c3116ac412a79813fc9f1e83b21042be13c
-
SHA256
e8c74e6a2ced015f37ed7d4da6ab48d8abccbcf9a580fc868fc9462aaac4ecca
-
SHA512
67a9b2946b4945ac1761ead61c4126fc4f00fdaa68a34ebc073b6e36dfaca38aafaa9e5ff320574ca0a869093ac2026d13d008820645ebdf3b5a34d3a45ddc35
-
SSDEEP
24576:u/G9Kv5YZKKT6kXH8CE2G2AW3vNyCbVqdOp:d9KvWZXcCE2GJW3vxxqdO
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ