Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
1.2MB
-
MD5
9f488e91936c3e39d4c8d9923d067cf6
-
SHA1
441ab47e76bad211060e7d7ef4a58911a98a3477
-
SHA256
445b1f82727b8efd01c1270643deb6bc69ef1654ed8f53499fe06fe4be77c977
-
SHA512
cea41c7d685de273cfafa1f4a404a0aba3f32b98f807d974ac033e1de692310af4b14bab44160fef41691964db50faa4f82789d3b1f8da750eb2f0a533ebf898
-
SSDEEP
12288:mQMZ/k1OHC+BNRz8knXWG4DIWLt5Y345yOEmmTM6iM8ltt9fkfhSPc+3GYNsMJ:mQM7tWdDIWZ5Y57mCTP4lk5SBNsM
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1020KB - Virtual size: 1019KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ