sc0pe_hidden_pe[.]exe[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sc0pe_hidden_pe.exe.dll
Size

25KB
MD5

72b601a1609673f221ca537200e6f074
SHA1

9bd391169223d5d967cbda11e237b68204cb8511
SHA256

d6d27ed1939b8527bfaab77b5cda589e3cdc842639958f7b4b63aed35ac7a7ab
SHA512

4ae6039161605ef623e754693d7e4df58d43e9e9a6f50e9d61b80ef3b1338a89fce521ca0202b9c2acd4efdb49ba4c40af16472498111b6112be0258c492f1b8
SSDEEP

384:Tesj2NUkxM+lCpLI1jG5DbW0uEhGNvuA8GvLXJhH9bk600rwLAxdL:Csj2QNzcrl1t9bZnwL4dL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sc0pe_hidden_pe.exe.dll

Files

sc0pe_hidden_pe.exe.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ