sc0pe_hidden_pe[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sc0pe_hidden_pe.exe
Size

35KB
MD5

be09d1a9fbdc7fe4ad47e49a0ccf2a0e
SHA1

3eea7d856de59fefd670110c2edda63c319a5a1b
SHA256

b86193f0f5eeadf451f23596dffb4d015245311c67bc15244c2b1c81293d3679
SHA512

9e4cd2db527c61a894d95da462f015a8e0ec59d2eba98f37798869b8b46f426976c8870e82d2442d9d165b92051cc455a9145d8a7144c18c1a044c69ddb32599
SSDEEP

384:12ds+eOJ8FIkwQLZjqAioJYkvxQgETk/eyJCbUi34Hy0uEhGNvuA8GvLXJhH9bkn:c0ITAZjqAVKkJddcrl1t9bZnwL4du

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sc0pe_hidden_pe.exe

Files

sc0pe_hidden_pe.exe
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ