Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
General
-
Target
tmp
-
Size
815KB
-
MD5
72e64eb663c941360479cc55aa5ba873
-
SHA1
fe390f88f59e83c5f0a1e768596e861fe4a17216
-
SHA256
2a3f2ef4028d29252bc5b86701a71ba483d754c96884959f5419f015cb5dd5b2
-
SHA512
618e811ec940e2f21be255d77719aba409f69964406aaf9f5f7d1e6e4dd1288a67f891fe274744a67eb15e8eb308ae1ccc522635e6d3b5830a475eccc218d96c
-
SSDEEP
24576:Ll4f6wlKqkJAvjK7dhu8OcMeszWyFfeUFKSXsZ4kO0l:LliEqku8OHW5+Kx4ktl
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ