Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
General
-
Target
tmp
-
Size
4.4MB
-
MD5
9f910aaa4912177ae9a8397c6c857c40
-
SHA1
c06f17a5d0d6643b2a9ff2a42b0934c4426b5ffb
-
SHA256
14a15bfcc44f3ea384a3bc148ccc1b3751da6b713b31aa9725558845bdcc18e3
-
SHA512
de5721f02528f32e441f8ed874af02684af41dd8c0d68c52fff908294e253cce02bd69d3210566106be0da2568c45078130f66b3cf2570ada614d6666aea4738
-
SSDEEP
98304:Y+d/EmKHy3b/qSZlUXt107zApBrqOET1pg:Y4KH+b/5lUg78pBp81p
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ