Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
1020KB
-
MD5
9e278af14fe13aebced6f26ab7815086
-
SHA1
4027dac7f0c2220e46dc850f381a9c3b911c6b2f
-
SHA256
d6d9ce354d8eef898a03c0d3dd149ad788bc3bae07220316beb7de68f12dc94d
-
SHA512
7997a9cd771f0b542de1b01278d0fb520313106ef8ef3c3ae975b2b0576c47452d82c2a57042618187902f5248e97c181156f9b49428f590373396e919140ba8
-
SSDEEP
24576:Xzl6Ta+Cljd9y34bGwOk0VovEi+FDOobGefbKyHeSnE:XMklRYoaPHusi+lOoKcWCznE
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1012KB - Virtual size: 1011KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ