Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
1.1MB
-
MD5
ac9303872d21893ff80fab77f557f94a
-
SHA1
1a988ed6e1856d6b7664c712ad951b8764788ed1
-
SHA256
7d9418917c60dc3b7b4a9ab41f8ffe4b0bd4004addea5b9483605279c33004f4
-
SHA512
433a6e901ebcb3c84e3bd7897289b99844152960340977c164246c713f7f209f11beed5a1c84425dd551f44fb6fe247302d495da6f4e8a72d87394ef5650c54c
-
SSDEEP
12288:L9An+yWjOUq64+Th5Z+qXpPOopZDNiDrdeZC3kmf/3n/kcmSUNxmT3Jvqnk//xFn:L9hbfYDMy3FZqmJFY5qgkP38
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ