Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
1.3MB
-
MD5
fbaac522046f0b2c2ded0ba88585f68a
-
SHA1
70f050f44b83c47a41e94de0fd5e88a4f3ba4cf2
-
SHA256
85d72481b46dae1f11917c668a2dcb054fd1d72109c90110d5509060c5f1f7e8
-
SHA512
4ea98ae5c04c5b2e888b4adfc4cf228b8cb634789d65ea3e6721932375252edc3f9c80ed6dda76fef0142bcd25ad5dacebb8272d2ba6ff69f9af68ee82a31046
-
SSDEEP
12288:eUSUo3MzSSV93QMOEAl7Th8HmbsFAlQreYRuFzNwbBW+WhQARkotlR3fPt4uSxB0:dSSDY51+PqFJKA+WChIpVCxGkFL
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ