Static task
static1
Behavioral task
behavioral1
Sample
tmpbodc5ql2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmpbodc5ql2.exe
Resource
win10v2004-20230220-en
General
-
Target
tmpbodc5ql2
-
Size
792KB
-
MD5
5d011c12ed97239fabd4ef522052f177
-
SHA1
97e5dcc197038fe5d365debff4f58e11c8d2626a
-
SHA256
a104e9ce898c2cd4c26942e2d66f25639ec940643e18007a636fc14800da19e7
-
SHA512
0c16b110eb93e47165e570428d0351b231d48e139c585d63f903c967c0222f1582fbec9d443451f31b87a2bd40ef37ca7a67877199c9b594fa75ea965ecba469
-
SSDEEP
24576:JA5kq7VP+jUW2BybxpPXQqabxB4bnUUtJPOeAD:i5DdByN9HaXUtJPOJ
Malware Config
Signatures
Files
-
tmpbodc5ql2.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 785KB - Virtual size: 785KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ