Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230221-en
General
-
Target
tmp
-
Size
972KB
-
MD5
74032f9eaaac6d32f196bef3e14abee7
-
SHA1
bdf2598f9e1e0a082b73d0eba33e751985d8080a
-
SHA256
06cd81198082d8438712ab708be1ef02d57bfc3a5bc65553aa5be350f0cd6081
-
SHA512
4662dc76f750ceb4684c22b88eb541f0b1b1f6007102f49e8dc4cacb6509dfc4ae24caf73f69ffdd5f1d86b0cd2f7aa269f190060f27a64f594336f5f1e4999f
-
SSDEEP
12288:LF7JF9ADz1KGRbItDEDT8GWhXgOU2Z1Qq1b/pKOpI4X8bL/iMBnoKV/GCQggxpN6:LN4NYlXg2nQw9KOpIJX6QvQggl3hdPI
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ