Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230221-en
General
-
Target
tmp
-
Size
2.7MB
-
MD5
8689848b6fc977ac922e7eb2b1213b4b
-
SHA1
0e768ce6072d32017adf78710643f9548ea055af
-
SHA256
c770b501a97600f4c91198d0c44070053cfd058be75757fc46128f94ce39d5ea
-
SHA512
0487e31576c81449c67a5df6dbb51a108e9c23f644971e49b1fa9934bddcc9252075df65f504db46f3a4e9da5aff8ec216600b5d72f96dbc40462187d80b6d52
-
SSDEEP
49152:z2v/W2v/cWOkZlphYy0WtteeP80doocXjS57T2KeiqesHZAQWwbg14CrjxTDf52g:zeee/rdhd9b3ac6CfpUM4CX9me
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ