Static task
static1
Behavioral task
behavioral1
Sample
General view drawings.scr.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
General view drawings.scr.exe
Resource
win10v2004-20230915-en
General
-
Target
General view drawings.scr.exe
-
Size
40KB
-
MD5
d8919538426d062f252cdc0fe540b172
-
SHA1
a2238a76ca4bc0a35210892ccfcf2494c036102d
-
SHA256
1f3d4a141c441211c8bbfa33e2108365a109b490c3f648538a5dd96cafd23425
-
SHA512
b80e613b18880fa08c32acfde088e5c7060b9d365521f4f2b446e3427f1bb119986428ba10b870f1edc9e472c82dd41957211c48bcf2670e24f9a2dc16616e87
-
SSDEEP
768:XojCabjvWKUDimEpsER1cbSLTJkO7ebGmPOYMDjODLycyrsR2vZQ:XojbLWXFEpsw6KTJh7e6DAEvva
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource General view drawings.scr.exe
Files
-
General view drawings.scr.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ