Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
2.8MB
-
MD5
d7c8d8e405ea5d1338e0f006855e10ec
-
SHA1
82697f6d8847d397a74afeab1fb5e0fc45984677
-
SHA256
92316cbe2ae9d445d64507789923bd18aad67a6a856f8f699d73152c6ce33ac9
-
SHA512
884e2a243d4b3e1da65220802f7d6c2804514e0d01d3fa52ab59aa0c47f83e21ac933e866e2b8d7b9589c48551e14762caeddf9fc1887c25120e10e92e966178
-
SSDEEP
49152:Wis1VXeIxSzv+l/KtpcAD7Cb2aKF6kaGPyxwPgaX6rGwcYKOoNz+iMcy:W93VBUHLD+MMkvPrPOrGwtKPz+iMcy
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ