Static task
static1
Behavioral task
behavioral1
Sample
tmpz0afr5u4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmpz0afr5u4.exe
Resource
win10v2004-20230220-en
General
-
Target
tmpz0afr5u4
-
Size
612KB
-
MD5
fc981bf5843063b93311c756824ee5eb
-
SHA1
a06472abc448049b0919fdcc18a6cf4e2f456ddc
-
SHA256
b8a0b0d234e61f39fcd34774f35a33f17e6e8f0ee1a1a318758a17d4cfb6dc32
-
SHA512
05c7d3949f47f5443269a61d6e559a4fc99d85791b79e082cd8206247cd721bf8d204cc61967facaa69dc0b0f367a44929b65c310d26355f12a1c34b5a27ce91
-
SSDEEP
12288:owFWlm+ReVDr10PWC1vUl1zA6pTdaHSHVzMRtlzWLG8Xu:ow4lVMVV0PDMl10goHGYzC+
Malware Config
Signatures
Files
-
tmpz0afr5u4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 603KB - Virtual size: 602KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ