Static task
static1
Behavioral task
behavioral1
Sample
HP-3082023319.JPG.scr
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
HP-3082023319.JPG.scr
Resource
win10v2004-20230831-en
General
-
Target
HP-3082023319.JPG.scr
-
Size
855KB
-
MD5
de6024fadc8489fd2743729d35d1a91a
-
SHA1
c1952ece2c4799d76c65aaadb5e42944ddb34730
-
SHA256
b54441492c600f40cc81d695ddec0bbc824920ed1567b3f8b14c545ec326f867
-
SHA512
1f2621ed691e8cbcbed0b52657e01ce71c65cf1584b57caa4a156b6e3fa79b1373c1721ac6155cd47f6398bd2b7b81cdcc1d5fd1c7de909ebb3b63b1a5c83e3f
-
SSDEEP
24576:wC+y/sw5eU/hYn5JHJRPwSE2L2cGHFSi:wKkw57/gE2L2ckF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HP-3082023319.JPG.scr
Files
-
HP-3082023319.JPG.scr.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 850KB - Virtual size: 849KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ