Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230621-en
General
-
Target
tmp
-
Size
95KB
-
MD5
3de3c62bf07b3cc5179139b99378ce6d
-
SHA1
4e50f0ff525c1f302767136f4b83a019e34cc37a
-
SHA256
0d54588e48365697954a0fac19f92008e11d001917bfda7eb93e5984322cd60a
-
SHA512
4e0bbf700be0aeb34ce72a2d0f6f74381ebd5a0ec3b920ac423d077da65b9e0a485ee4a621ef04b7ac267687d385b8302bbdbac14f121e31bb1b9517c652f3f3
-
SSDEEP
1536:tqsMrq9oOlbG6jejoigIn43Ywzi0Zb78ivombfexv0ujXyyed2PteulgS6p5:b2CoGYn+zi0ZbYe1g0ujyzdz5
Malware Config
Signatures
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ