Static task
static1
Behavioral task
behavioral1
Sample
triage_dropped_file.exe
Resource
win7-20220414-en
General
-
Target
triage_dropped_file
-
Size
704KB
-
MD5
6b25cd644f183af7c7447ba2d658e8c5
-
SHA1
b3fee68e0d04e03c34ba546bc714096d13641815
-
SHA256
7952c76d1d86927893a2ef8ca0a23bb1b45af38565f2ad9cea09a942bd5059f8
-
SHA512
877ca781d89283c5bf7e26e45dce561d52c7a580aa08b172313443681494bf2aa24664a42ca95b6d88e76b43196c51997509098dd0979459ebe9ff48a6f658a9
-
SSDEEP
12288:7f2GrPyNdSjqWjsZ5uEd2iN+cSBxaHoXbTeradCnncD+L4THtdy/1AkXWXxY:2dSj/W5X1P+xaIXuELykxy+kXWy
Malware Config
Signatures
Files
-
triage_dropped_file.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 685KB - Virtual size: 685KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ