Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
General
-
Target
tmp
-
Size
1.0MB
-
MD5
22b7779314863ab98fdb44998b720eda
-
SHA1
613cf1c86321deac5a0a172b4290ca9b2fe1196a
-
SHA256
9784d4f3af63382e92105496844b25bc4e42e92305b7707c3fd6451c98c391f6
-
SHA512
bf133c5723b0056d5014e06207b1a1064e15c60304e14dcad0acd5427c179685ddf6a8f152406c2c8161d62530996cb89540e360f14966a9d3fb535cfd4dc68b
-
SSDEEP
12288:Wpl1K8tUyZmMRxEy0g6DxV54CRNCxOR3Is2OTo65dwWm2OKQqEsPEDigaDNlhXIg:FVC8hRMOTo65dwW1OKZ7PEDqNv4WaEw
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ