Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
709KB
-
MD5
3c3193565057d228a58f8ede068e0896
-
SHA1
03cf6e65ab11f9b7a9b744c35518f00f923a0159
-
SHA256
31821e57780e098eb5e41b1601b5c091e5bc9af8a67d0705dc711ab9180305e0
-
SHA512
0a3b63434ca0d70e21a92f3f6fa9092b2df0536d55bc0e9ab4b5245f2d88f887d4045516124dd591bb89b399f0604496bd40238b08b3874efd244060cea4b28e
-
SSDEEP
12288:a3HKdJVZz5dChZnvp5X5/uhCGmaowSsGqm42:akVZ9mZnvrICGtowAqm42
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 703KB - Virtual size: 703KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ