Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
813KB
-
MD5
46a28f1b24c3ae50f7630f544a7a55f3
-
SHA1
8746397c083ecd786e988c3f07a4989bdf6bcc82
-
SHA256
1ca4ca83f6246b9efaa32bc030d9373f72971fb01deff6499d6664fc7ce142e4
-
SHA512
44f3955a362271767377ade33c56dd9cb22b5dc3dedd1139f06c0345e50f4ce607a01bdda1df53d62dbeba018bcbb057fba641c76d1d84c9ad7b8526b1f07a1d
-
SSDEEP
24576:ReGs5nyyxk4YJ24hdYlXRgLlqEZV/NWC3gh/Wgfz:ReGs5nyCktF38mlqEZVuh/Wgf
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 811KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ