Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
975KB
-
MD5
244ce3351dab398ae740fd0bce1d1b32
-
SHA1
76a79ff381ef8ebf0ae82c6760ab74a451c2b327
-
SHA256
77ae5bbbf650f39f0018105bd287c7409ce48be03888c21f22bbac095c2aae23
-
SHA512
aef5b598eb3c9b34620c9efc000ce1685209f47f39962cbdebfbf2be5acc0a5fd5efc512dec209e3c3bf3546bfb4c3470f98b14cbb25f1243ffebba44f7b739a
-
SSDEEP
12288:8yDJas3z1KjbItTAjsulaC+6hWVAuzylLaYlEl8vQupE1ZvAYDNIQcxnxA2b3uJ:zMsulabehuz8awjYuZYTcxnxbb3u
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 963KB - Virtual size: 963KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ