Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
4.9MB
-
MD5
c1ddc7e96d1bdfc49881c4efb2876d8d
-
SHA1
bba6fcd71f92573e1958ae46e9c8fabf47c89739
-
SHA256
0154b955f0ee502829f50c158db51bad7b0c459310cff2ec5bc352a2e0e375f2
-
SHA512
ac8b65e2ae507e0ddd7120a92a94e7275f0cdd5821fc679e6991306d338b3243f607341369f2f29f31c18f267a4450d225be311c4af133fa50af3a6b86e39599
-
SSDEEP
98304:evND3SJDUPU2FhdM61ZbdjND3SJDUPU2FhdM61ZbdBy:evNjwJebM611djNjwJebM611dc
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ