Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
1.8MB
-
MD5
56c97e360848f78a00a75a93fe905f2b
-
SHA1
c053bc4e1fae3cc311cb67570240d0e3f3b4dff2
-
SHA256
e0a12c68a3a24e1bbbdd9489ace8f9978dec0c22a81c6bfe5638f7f7736bd3ed
-
SHA512
26c449553c3ef6e324734749f973222bca3c604fb0ddadbf7b1083fb4231427a4eb7a241c0aa7f9725685fc0eeff05bd2285857db97719b8263bac94bc058669
-
SSDEEP
49152:sJYNE5fGbtrUXBvQdFsrK1h7JruYjFiMSEDJamL:bNxWiFiKfbjFIEttL
Malware Config
Signatures
Files
-
tmp.exe windows x86
b8a8dca04e523671e420c1034159f387
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc90
ord2360
msvcr90
memcpy
kernel32
FindResourceA
user32
MessageBoxA
comctl32
InitCommonControlsEx
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 976KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 805KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ