Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
832KB
-
MD5
f39a3b0c3ab67647abb51458a6a8608c
-
SHA1
cc6e1f8bfbac625ebc05437e4010c3f3596d7eb2
-
SHA256
76ae0354e5a2b078e21537bd939314116d7904b820af132c877c72354fccea9d
-
SHA512
3a7cc9ae2a63db46250e1f2a8275ce83ed4060f114e0408176602c2c74c4e85627cca9b60462f5537db63882c4dc07d17774280990fa1497058be1a04dfc8375
-
SSDEEP
12288:KiWlV/Dfrps1P4M/Qe0iIhBZfZywqRaIwFkLIZwzAbWlV/:QlpDTpQwMYefRyFI/kqlp
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 820KB - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ