Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
465KB
-
MD5
6ea8e8ef0e4ef1d07ee5bcadb8986326
-
SHA1
5b594f157bd3b7832b40ea70672a46eec055e1e2
-
SHA256
2fc103f91f638b1a26952d2080f7591546a38bb7f712d86e87c6cbcd92ddb5c4
-
SHA512
d15f6b34b3cce61604da19cbcb46242765c88e947ea0494322195d56f2f453cd4276624937fc295962558802558c4c089da76b71abcd3ef801b57299c8feb326
-
SSDEEP
6144:NId2Wt43Mtk3VG8Ik3KKwC/Z6x4JttcBDlxdwpfxfBThM9eo1I7u0Kry2wej993r:0Klc856MoofBTy9eo1dCY
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ