Static task
static1
Behavioral task
behavioral1
Sample
fsrtmp.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fsrtmp.exe
Resource
win10v2004-20220812-en
General
-
Target
fsrtmp.log
-
Size
5.0MB
-
MD5
ebb79ed82e78aa00df63dfa1794eb01b
-
SHA1
c1de1893a64240bbd8bbb51520d7d91f9703758a
-
SHA256
20b04d05b0baed6393dac831e865eaf4c482ad3d5de1231972fcd89c5a32a34b
-
SHA512
4d30db4d3035e21d22c75781bda5e153f3fe6325afb9a1f5eb6c30b95fee07ee2a2bd6dac16a9390453903d26abbce6714d1da0bde9863d6bc3fb13e35dcd402
-
SSDEEP
49152:+3Mm7uF8SABPyh8fd4bcMAoXoeYY3ZBCDExyFgXFBkR6uR:Ev68VeYKEx
Malware Config
Signatures
Files
-
fsrtmp.log.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 282KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ