Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220901-en
General
-
Target
tmp
-
Size
490KB
-
MD5
8de566cb89eb21e99c09eb4ab470ac67
-
SHA1
ebbb58f39f78f8a9d384f79fd47aac8711dcce43
-
SHA256
f1cd87c944d9650c89a51bde24774850f087f6fdb6da5eba6cd360d79b98fc5c
-
SHA512
2358bb5831366ea20e3aac0d83e6d5cb52a0c69a8b8973aaffa6820fd1a3e73df38a7c8a322e125d8c62b4a678024b3b61a8aa098fee217c81c5fec71fcb549e
-
SSDEEP
12288:HFphO/zqsaKqeJonUQhjP9R+cF8BIyxB3q1X:D4/qe6PT36BPtq1
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ