Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
3.0MB
-
MD5
e7921bc2e8f492e61c81836fa30cd72a
-
SHA1
15419c91f5db56a7d4d21d556cdd44699e5660d3
-
SHA256
df5199b36dd2a89c269cc4a85fe41b61b5df0e14dc2c94b39451f766bda177b6
-
SHA512
80e79b2549f338f8a33b26795b33b01cc4b1ec32a3ef1447b84402972b55a1f95f36e273683ec4769673363ba8c8cebbefebfbd0429f557d9c9c70d637bd9224
-
SSDEEP
98304:ntsfgDRQvgDP3/IXh/e0BUS0yR6T4gLWh:ntPR7PrZ66T4uWh
Malware Config
Signatures
Files
-
tmp.exe windows x86
27e92fca790721d94755cd976d2dd4a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidLocale
user32
RegisterClipboardFormatA
gdi32
GetCurrentPositionEx
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegEnumValueA
shell32
ShellExecuteA
comctl32
ImageList_GetIconSize
shlwapi
PathRemoveExtensionA
ole32
OleSaveToStream
oleaut32
VariantClear
oledlg
ord8
gdiplus
GdipGetImageGraphicsContext
oleacc
LresultFromObject
imm32
ImmGetOpenStatus
winmm
PlaySoundA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.4MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ