Static task
static1
Behavioral task
behavioral1
Sample
INWARDRE.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
INWARDRE.exe
Resource
win10v2004-20230221-en
General
-
Target
ninwardRemittance_copy.img
-
Size
1.2MB
-
MD5
94fb1a89f809551622e083c50580293d
-
SHA1
3845f00ffafcd8082facc020d244dd0abaa194b2
-
SHA256
f5b2147feeea4c9e62ec28aca05dc7665cd00925c09571824cb703313abd1a2e
-
SHA512
f5653ae8aa03ec87340adcdbc57af751bfc47f45b9157c5c47acacf95963efeb1ef75f4065c510b41d03f2865013743a547208aeecbc859b37e4d573e7f0addf
-
SSDEEP
12288:NmRK95henzjWn/lPhi1oBEnK61OkHkREZUVdlJm3FJ5ShC5I:oRS5h7/LiGiQuiTz+ShC5
Malware Config
Signatures
Files
-
ninwardRemittance_copy.img.iso
-
INWARDRE.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 617KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ