Static task
static1
Behavioral task
behavioral1
Sample
file.msg.scr.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.msg.scr.exe
Resource
win10v2004-20230220-en
General
-
Target
file.msg.scr.exe
-
Size
508KB
-
MD5
6b7ed3abdd8484b313948ba83fde717f
-
SHA1
2318e1d65cef538f1cf88e2235a5dd350ff40449
-
SHA256
eee33ed66c2e88e414a5887043db18edafa2fef889882d751f0448ed360efc44
-
SHA512
a8c063f22768bde6e0cf6c510867c6eb3b3add47ac57b920d44f94485b830089f5318d31d960239c5f5f7f963496d5481f7c1ef4b2291c01ed01d20a86f24c18
-
SSDEEP
12288:gYQZsuW9geRWQmkt5nZsCRUTV5nhsf8r1J3OIh8W:gYQZsuW9geETkPZstTV5na8RJ3zhx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.msg.scr.exe
Files
-
file.msg.scr.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE