Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
General
-
Target
tmp
-
Size
922KB
-
MD5
3b0295343f0b34fc0ae4951c48911dd2
-
SHA1
52a2bae7cb6bc5d1fe53ec58acb2cfb86e238412
-
SHA256
40c9387d1982d53944fa9a527152ab7103457d7fb3b37865af98fe399641cf75
-
SHA512
a418fcd67a80060341fbe86d8ee9a924ff769809dd0970e33a3643cdd661008785e9da71cc5af7c89c9baff4aa3321064db9510c69dbf08cf1fcfeeab41b55f3
-
SSDEEP
24576:wlpDTpzMxnwlwOXSN3DMDFamQwdqWUnm8hhgxwMYenlp:w7FSnJ7wdqW6mZxwMYen
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 910KB - Virtual size: 910KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ