XIII[.]Scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XIII.Scr.exe
Size

432KB
MD5

29edafa95edd0d842f196af692f37f69
SHA1

b641dccdef1f3e2ca99fcba306f4cfc17016f864
SHA256

a9bef57c24f3be53709b2a0105e9389194564d963f7a44724477ddbe72eba02c
SHA512

4bd861635f9a922b047f1af89fc8623e5661d2a957dedee05db044d4f60644f5c9671d3f7d093349f2bc8a38e52e399428e6b8e482e2c6de7ec01e5691963c3e
SSDEEP

3072:oHzBgdDgBy92KojObH0hLNiv+XcVHVAhfpCbYoyTPKtXwjcu5RNhjA18+EoTJdJ8:YGYyeOUTG+XUsgHyTytAjcu5Rnj+rE

Score

1^/10

Malware Config

Signatures

Files

XIII.Scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ