Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
471KB
-
MD5
b5e30aa80edd0d50041e8e0685138821
-
SHA1
0988327c69e93331c33c1ef447e0585d27b811c6
-
SHA256
93684f15e4c85011bd235894f806d8480b8b9e6542b2c011edd8f86e5678db5e
-
SHA512
8d8b18c4ab2f1ca54a67766c8dae8c61e40e2bc94f44072b80f2330e59df29632a776eb4806b79f9091248952aa65a6c048231a9e6e161f9c21940a0fc08d4b3
-
SSDEEP
12288:scHKxZuOv/TpWt/3iWWMe8g1kMrpwLORaU1U1eACY:81W9LwD1k4qu3sCY
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 469KB - Virtual size: 469KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ