Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
808KB
-
MD5
6233af52c0d7370ac2e171082eb42ab3
-
SHA1
cc49c07a297f5fc59ac92a17cd58aff809d196ca
-
SHA256
94050c1bf88c84d698a636916155475a4501012d9b75cc38b6e344490470cac7
-
SHA512
804bbe3f2be58e6dfc28bd23c322d2551227bd395783bd05a154900c497816d6115c3e6060356b057e43de4c1a9ce2540bb95ba1bef443ffcae912fbd4315924
-
SSDEEP
12288:FzAuV3iJGRTwdKc8/6r4YdQKg6fE8CL4Bct3DNcuODkyja5gz71Th3/z/66RPo9Z:pVyJT78CzfpCak3+DTSUz6sOAH
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 791KB - Virtual size: 791KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ