Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
5.5MB
-
MD5
769c88af8f79b502a3f372313da5c304
-
SHA1
1ca8f93fae77bebfa4d44d09d7150c62b2937d88
-
SHA256
ba2b024ed0ca0fc1ff7c4637e16eb5438ef7f7ca983142accdb501c12f048a63
-
SHA512
5ee6d5bddde129b816f1924d66ebaf0651321b198103b779679dfc12f897798764905a9baa0b185b5c1133655935c559a4822acfe126e1a8306f17db48a7d071
-
SSDEEP
98304:uPEw5ltGUK8dHjjg2XhQGp74t55m4Si88Gv6DvbSwS4uo:u8eGk4AQQUFm5i8BSDG4L
Malware Config
Signatures
Files
-
tmp.exe windows x86
366f43d497c43116ac4cd7f83136008f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetVersion
user32
ScrollWindowEx
gdi32
CreateBrushIndirect
msimg32
AlphaBlend
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CoTaskMemAlloc
oleaut32
SafeArrayGetDim
comctl32
ImageList_DrawIndirect
wldap32
ord29
wininet
InternetSetOptionA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.1MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ