Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
959KB
-
MD5
f0cbe408045d492ae41ee92ad7c39bea
-
SHA1
d25b6f6a20238bcb31b36af044428545160375f2
-
SHA256
313ad26ae426d1f3293c2d78ed3fde9093661e90dc876246e8703f0a20522a21
-
SHA512
d7f185553053b7c3cc2742c33800daa0484728f928ebe111fdeb8cf3c85ace7be78392e9ce0ea97d782b85df030a9bf2745470df9424554e8f01a44f4c27b0e3
-
SSDEEP
12288:x22iNo3XdJVZz5dB3Jf8JjlByZ1WW59xqh5L3tm6UgshB268MMezG4dMzu7eD9vm:x212zVZ97Jf0n6SJiBmMMeZwceDuWS
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 957KB - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ