Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
554KB
-
MD5
b8de74c80e48286027ad48d108989b89
-
SHA1
9cbf23aca943aefdc2e46b6447d91bcb98a2d1ce
-
SHA256
2713d5f063d131de0d8ab8c4768401364b4f512c7b79cf6ab14f8d596a725af2
-
SHA512
712c9e101b935508c22f5755da49c6497c9149e9f38a849f12c44bd3f2a982c79b04e4a532766066b2ff1c29f152ac790056491f6477c7c75d6fd0c3230d47f9
-
SSDEEP
12288:nyV7pLKc1PdCuP6onq92W9BkY87f6641fi:yvKctdCuTnOl9vUO1f
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 551KB - Virtual size: 551KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ