Static task
static1
Behavioral task
behavioral1
Sample
triage_dropped_file.exe
Resource
win7-20220414-en
General
-
Target
triage_dropped_file
-
Size
577KB
-
MD5
5e5a0e7ded7a835da0e832bdf2526bfb
-
SHA1
1025e4276178e7102e06a737e45bb6dbbb1d09dc
-
SHA256
91ed8c4b2a115926ee39c1a20035f3a2fcb24a9b270a738f123e7cf1f992db7f
-
SHA512
fa669b9b5339f18ef229c8f6b42fff7fceaf101af3c8eebd8aedc205bfd2c0b5c698b76febedccf7675b6969f9412493a57bdf136c41f1f109507e16568840af
-
SSDEEP
12288:QEqqWjsZ5uEd2iNmG1ZM/eXJ2zK3e3T+7eIjgkdvmCbQY6c9EDlt:QEq/W5X1dhb38T+CIjjnMY6c
Malware Config
Signatures
Files
-
triage_dropped_file.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 575KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ