Static task
static1
Behavioral task
behavioral1
Sample
tmp995D.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp995D.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp995D.exe
-
Size
14.2MB
-
MD5
820a46e39a7abf7e4b50e2a78e34fbe9
-
SHA1
5c6f5c04e8cd85c233bc1b39a30d9ea29f17603b
-
SHA256
66329a56f2ab10fdd3050c07349ad41f802e9f100b9bd2925f9b0940ec3ff0a6
-
SHA512
7814e28798c35a2ce063fe2efdfaf4e99be6f5178b1989e1f8d87bfa4466104bc9659db6e878a5b5c6409694097546fa796ac8e301d711c8261f469c5fc288cb
-
SSDEEP
49152:Em+wUYdUPrpANIRI91PO2InXZSvv0Uaws6kqvqp2BMFhCuSBH9NbzS6jefPQT/Vj:N+wUYd4ONsI9hFaOv0kNFdUR
Malware Config
Signatures
Files
-
tmp995D.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14.2MB - Virtual size: 14.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ