Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
762KB
-
MD5
6df3de988d6ce61faf9dad16ccb863ad
-
SHA1
d47f3d30169e3d7301ffc738b15174c14647d600
-
SHA256
7b59507d5b9f3c30fc095fabfc7e88ff59977767cc39477ca75f20577a750989
-
SHA512
ed7bbf23f3da57f8cd43b8ddfc1d251637021d3896ca626da071374cbac1387a3d1a99357c8bfe7a0991d97c613800b66076a2b23ad8b3e73c291600e3ee98b5
-
SSDEEP
12288:Cpk7PACcXnyXx6q12ixyiWMkuAG8LzDZH5CbC8gZ46ahRZ5G:5AC1NQiAuv8LvCO8g+6S5G
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 728KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ