Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
626KB
-
MD5
16337ed3e30824cfe1a9dd91a448b0c6
-
SHA1
40265bc32aa3b84067d8ce92a8c8451b1b724a14
-
SHA256
44fa0484e7960ec4bb214e8e822a0b4043cd2ef9b3dcb26a11864f7e946729e3
-
SHA512
3239781cdf6eca8ea801ae14804d3a19e7299cf64ab0704282a43b2e3a8db2de78980fb238dc5577335cf068601dd1f27efc969e04ae7d8131f7da641010afe8
-
SSDEEP
12288:ePb+HT0qE8S6S7ztLHKNu+A+/1bHF+XBQE4g6piTdmwxnlOydHIT7NWNFXuuiHB:eb8vOztLHKNu+A+/1bC6AmVCE7NYut
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 624KB - Virtual size: 623KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ