Static task
static1
Behavioral task
behavioral1
Sample
sc0pe_carved-245869.bin.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
sc0pe_carved-245869.bin.exe
Resource
win10v2004-20230703-en
General
-
Target
sc0pe_carved-245869.bin.exe
-
Size
865KB
-
MD5
e3ada4aa642fc5cc92af2b303d6a0878
-
SHA1
2b9d8a7aab422210f11239d1cb30366fb5baa45d
-
SHA256
6d529201a41e66d6b47678f5c032153343b042141791103a9583e674b8e2321b
-
SHA512
efbb4153eb5b8ebefb6dc2eba164cc486923582a59805a15d8ec9b42344b4f4e38fcc1aeb9be3a931f0aed68bbb5784c85ac0ef3369ad93e30ab24a75e9931b2
-
SSDEEP
12288:6aVWgOo7MiIN/egB/Gsyt8lOqinvAfcN1b2+mZaA1tYevTdFigarJwM7:6I9FsEsyt8l+E+s1tB7parWM7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sc0pe_carved-245869.bin.exe
Files
-
sc0pe_carved-245869.bin.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 570KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ