Behavioral task
behavioral1
Sample
screen.scr
Resource
win7-20220812-es
Behavioral task
behavioral2
Sample
screen.scr
Resource
win10v2004-20220812-es
General
-
Target
screen.scr.zip
-
Size
319KB
-
MD5
6e97a68265f05d56ab8851970243a5a3
-
SHA1
93e476530c1feb32fa5afd37fedfa2c8268fc1e0
-
SHA256
6075bad6417a82de43f05e9daa86e3e380589faa7bdb99a1de964e283fd96bf9
-
SHA512
2baa61714e517db8af544eeb00a5b5248b693587e8fbdb2458426497642deb07c23973f5008fd2ae6b6082aa1472fae3b03771067c58d284d0469d80c4121999
-
SSDEEP
6144:Td5fTqn9bWwIf1jJOsrpFGdP5j4beyLuf36pwG6oxGmMNxaczXh:nf69CFNNOs/8yeyLY3sxxP8V
Malware Config
Signatures
-
resource yara_rule static1/unpack001/screen.scr upx
Files
-
screen.scr.zip.zip
-
checksums.txt
-
screen.scr.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 680KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 212KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE