ScanCopy031023[.]exe | Triage

Sharing

General

Target

ScanCopy031023.exe
Size

575KB
MD5

c3d6528d2ba2f2ea40a74a4170b4b63f
SHA1

ce0d8769d41feee9076c3e9039772bfedcd55ec5
SHA256

a4d9ec0bbdb5fce74ca575a65f549284c4370f104d5b143ddf591b5869d9ed5c
SHA512

a5b893126dcacb15c04816d0a07f5a2b0028282f97aa0838b5e46015bc6f7486a7e6871cadbb545269bb87deca6580d8da2e72b3367479eabe656bd06c5d250c
SSDEEP

12288:p8/ynLFPvP5kJRi0tjXmrfVgFtnAnBhRETXKs:pDLFvqiujXcIWBhW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ScanCopy031023.exe

Files

ScanCopy031023.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 573KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ