Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
890KB
-
MD5
bab62d2eeaafa0e110675caf7e3b1dbc
-
SHA1
254c3aec99cd4a70f79bfa2dc52db6e293c4d970
-
SHA256
720f94268169c0be484b977e717ef167ceaace51c27e8f6ccba35f4985cb4bc6
-
SHA512
9e5ebc4ddc1b069a1a46c62c3b1f0f434273d0ee8a7b6b7bc8b3c6e03269546ea6832bf16b68ddd0a01afd892ea0ead195ba7d45931c7dd18d5c6b8399c45463
-
SSDEEP
12288:1/O8lpXU5ZkXyjl5CcVW2IaeTus5VSxemJe7jXlIPA7f6VGmKLP04R:1gCcbI5TuSznVW2yVIDV
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 873KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ