Static task
static1
Behavioral task
behavioral1
Sample
Scramble-Tool.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Scramble-Tool.exe
Resource
win10v2004-20230221-en
General
-
Target
Scramble-Tool.exe
-
Size
357KB
-
MD5
50d14bd0e330dea14fcf4b4d4e2d0bd0
-
SHA1
93ad791d371b411ea2d91c6c4e9a37ca662fa9b0
-
SHA256
e13d25ac0033313812267d9e3d9c90213b6bdcfbcca03ef464967f06b98f59e4
-
SHA512
b9ddff87021464f120819c0fafed07c2be2db8a55d5fc64aa1e5eeca589bd44ed489660ea29cff47938d64672cb61b1d84075b42bb1fd4a8fd52784be4915eac
-
SSDEEP
6144:m/nmommoFUHWgzSjC9SDtcJd2nW4aFoZujcjj2mgG3A8ShvQ0MP4873T+fOI8w0Y:mlHzSjkKc6ayjjp5A8ShvRbO+fOI8wo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Scramble-Tool.exe
Files
-
Scramble-Tool.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE