Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
569KB
-
MD5
807c38eebe83417fb45156001f6ae448
-
SHA1
06c22e4dfe29a1aa17d5ea73c00d1d7282a69ca9
-
SHA256
509876bf98ee51fc5d7a4d6af1244227fccd94a556a9c85dd9bdf535d8619b39
-
SHA512
4c7a54f738ebcbe1b7ed01af953e636ff25ecdbb8f537fc25a4d51dd5121a7162d7a026cdf3e937c5937fbd8d88fcf49923f6ad10fa24249d864bc6d02cb5489
-
SSDEEP
12288:RIZ3nmCmLyHMU6jqQNE26QjftmxhsXEvXveKOob3fiRibcPJV9IeXt:Ra3TsycjtNb6QkfsXwXvjb3KRv55
Malware Config
Signatures
Files
-
tmp.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 567KB - Virtual size: 566KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ