Static task
static1
Behavioral task
behavioral1
Sample
INWARD RMT.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
INWARD RMT.exe
Resource
win10v2004-20230220-en
General
-
Target
INWARD RMT.exe
-
Size
945KB
-
MD5
eb56c4825ec85ad8a31769d718cfff54
-
SHA1
7a3ec799412a4fdd3af8a370aa064f66edb4b653
-
SHA256
08e9b87ddb401b7d06928ddc9034e7057b57667ed2b3c2f4b8ec9209aeaca055
-
SHA512
e16b1e4c1af98441633feb7edfcfaf29683d88fe7ce3f25afbd9950896f7d08d9ec6b4ff70e3298535db62f2cda31a4af4bee3353141b7d411534adc0d0894f5
-
SSDEEP
24576:ZWqTC/fbyAvWIKZKGcd9FGo28HusyPVPbVKY0Zv:ZjOvW9FyWl8ORPLKYQv
Malware Config
Signatures
Files
-
INWARD RMT.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 931KB - Virtual size: 931KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ