Behavioral task
behavioral1
Sample
scon.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
scon.exe
Resource
win10v2004-20230220-en
General
-
Target
scon.exe
-
Size
20KB
-
MD5
5a619133c1901ffb9521905799457299
-
SHA1
342bf5a40dc4fe59711fa69ce686c8c17c5cf54f
-
SHA256
be00c0a5970bf47cd4ee98a301ae4540c457df905cb66e1d75fa2bae9dbccd79
-
SHA512
033db656c0eb2f301b3208205f02709272a24e5ff0be76997b15f8c8249833071ed63b64dcc12fa10ecd1427dabe90a87109c74ac550eb42d228b32b63ac6e56
-
SSDEEP
384:08RbJ9kZ/cenz9JenEylRBL9E0GK2fH6RKWPME+bP:tR0Z/zznoE8zL9E0GTfH6RtPMEu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource scon.exe
Files
-
scon.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifc Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE