Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
642KB
-
MD5
d1b6a98fab0762ec13ab4f4c9ed716ec
-
SHA1
bb2cc74da2dfa52091b37353d1d501e372a69cb3
-
SHA256
905e9fcecfca80c042bde09b3d644c094c44b44d29c383c60f885e23d17d18c7
-
SHA512
5850266d245b5544b104b5e4bedf1c526ac9e6fe7356adcdeacaedd96ef75b05b65175fc4210315233fdfcdc153cf9fbada940e5af62557a3a7e278e97f3bd69
-
SSDEEP
12288:Ya52iNouldrd+jFAi5SnSQIUJiN8maOMOr87vCWkOQ:YI1Oulb+j35SnSQxJiemaODr8z/k
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 640KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ