Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
General
-
Target
tmp
-
Size
1022KB
-
MD5
2eff07533d5cfe063b464432fb20ad15
-
SHA1
53000bc9bddeb78dcf4187f8961fd90c3622158f
-
SHA256
34c49ab5cbed3aafe3c6b0a1897a04415ab8ad95b0226a615ab8f98d9fa10075
-
SHA512
468d6fa82fb800f218d311ce2714b72a16d31b9618c8aabfe77622f470f0c8371bfbacda17fae9158458d0ffcf958489f1e0dd9915ae56529c2a5ed219033818
-
SSDEEP
24576:B512zVZ97syKr+QvDJwS/sKB5fLG/WmW7BHUfpky0Br/:B5AR37s7rNvDyxAGpW7RUfpky0BD
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1020KB - Virtual size: 1019KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ