Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
1.1MB
-
MD5
212c5beb7e726a395316402bc999a534
-
SHA1
d767e6fa17f6fd5cba05ec8e2eb3b8cd05b17601
-
SHA256
c5bbffaaa02f6289977ee6ba6f2684953114cebc79f3e3e6aca7ca301a87a117
-
SHA512
9ad6bc8b869b31bedfb182c705060d1f92330fc72357119994f6e59af0fe3503993451131ded87e2a4bd78a39be8a28999c02d5e57cfee5e44f555b3079f83b1
-
SSDEEP
24576:Ih+HEj5fhxXUJrlqQVAtJ9be9pIwpVRC0ueNvqI5c0:IhwQYsQStJ98hRxuwSIq0
Malware Config
Signatures
Files
-
tmp.exe windows x86
8f54c7f89ab7fb80e3cbd057af48cb19
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
user32
RegisterClipboardFormatA
gdi32
SetMapMode
comdlg32
GetOpenFileNameA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
SHGetMalloc
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
olepro32
ord253
oleaut32
SysFreeString
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 164KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 932KB - Virtual size: 932KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ