Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
7KB
-
MD5
c6e61af070b5a5cc2c582731a3104775
-
SHA1
5e6de9ed394c76b9c741ab25dfa34e6c9a9ad803
-
SHA256
d62d134871b30f2ee0eadf05cd76001f73ccdec1cf41cc182a2ac8075fa45da6
-
SHA512
b5df95abbc2f0b2775f875721401d353363cc0d49c48eaaf7646c66ebe23948da70bfd533c3b42b48e3c3bbbec636b9fe316b87d88740d69766b62ada213c9eb
-
SSDEEP
96:iN6e51Tx18WMv/RQ+r1puUD1TIoD9LGkI+ViGRw3WmrWwuzNt:U6erLEZQLinLrxPi3WmrW1
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ