Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
2.9MB
-
MD5
2b053b525219cd96566a58a7d4ff575f
-
SHA1
6cf35c5734495a59e170f3cc9c828f5778f71ebd
-
SHA256
2ab02b458dfbf0b347c20515b5dfd30da6aeb663f9bfb9b13383a9bb267ed2f7
-
SHA512
85e1f6c93c9a8fa2ad272ee4cccaef9b07fcff6faf2420a927a538311807ffa9eb73db8291b6b7b7ea3411b83c0b983d44e3aa53e50df8cf9f6e4f8a98679d7c
-
SSDEEP
24576:r2aWGoh0OndRBdvogQSP0PXAlCJztaCQoUS8s6eU1HQKVX85j5bZo//J2yLGm22Q:n3he9l8POCisCN6ZZoIygrBYj
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ