Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
838KB
-
MD5
644ef0e96bb766efa2a3fe3a7dfb0d5c
-
SHA1
76f4bc8da9ef0130175a93d29ec7f913a904934b
-
SHA256
3ff802e875d54b64758cc2e91844a7d1d9c87c348dfc18604db5ee6dd856cca3
-
SHA512
c75591011ff6542f4ab6018ba58163f4d69ba6bcda6af68bc22c68a87b0f9f08d5d2d19da01d23c53cec30eec702ee3fc90f70e219827011caea5dbbac373af2
-
SSDEEP
12288:gg5VmNVT3J/0UNz5fPC6q1BQh/IObjfF7LLDEXlXY61XIOmM0uY:hLm3jJddnboDObjfxLXMVByx
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 657KB - Virtual size: 657KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ