Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
963KB
-
MD5
47d874d7753f0ebd3538cdcc91579438
-
SHA1
e3b527d124c3ffa33da3f92f1d4dda93316f9bcb
-
SHA256
8ccbb7d442a40b45151d35312162b1ceba480665255b3a4e85b70b08f205fcc4
-
SHA512
f8bceefd71b3d438ec0ec164180cd9059fc89263b52a77404f70297f2d7ddcecf78ece52f44caf417221c0212a606ee872b6fe08d94c69a81c90377ee5146a90
-
SSDEEP
12288:mwE/pEOlSS+cBV8qKdX08kXqpYJU7Ab0K1tRZPFBVEC5WZczul21pX4Bp+5+JVb:QlSSD/t6pYGAYK1tR1ul2noigJ
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ