Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
General
-
Target
tmp
-
Size
875KB
-
MD5
70b5bc7f31f4aa02316a925c546ac125
-
SHA1
5840c0dcd5b502296faa0c4f3578c977fadc7af9
-
SHA256
78f70edc34d8f038eda8371a2d5d8a3f57b10848e1bc42226a109ce50c7b43a1
-
SHA512
549997b6fc9a8859c18b498d7fd08b98fd9613651ddd9a12935e5f17c74c09a2bd3ff2ba135a2397f76792c2906a40445c38cb348f3afccba211f2b1ffe60e30
-
SSDEEP
24576:EpeR84QQkVEirf8l/9w/kc6qw5c978qxB:ELPdV2l/Gkv5kQK
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 867KB - Virtual size: 866KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ