FakeLogonScreen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FakeLogonScreen.exe
Size

27KB
MD5

a65b02f7ee85fec8580d69361df16350
SHA1

41406d3de2859489ce7db3d81309830470801c0f
SHA256

7a8911925aadc8e4140a62e5467e01072148a5bb6c408fb083de934d3eb9bde0
SHA512

8a0abca337ed5ad3663f42e5d22b07b90ae86b226018051cd050bcb440fda38cbe3af9d3e23fc4a587771b36b1fc6bb2208bef99b2d0e02d4b710054b22aafe5
SSDEEP

768:QXPnbds6XVq4ic4vcwtPx157JARuFjlq:p6XviLXtPx1jAR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FakeLogonScreen.exe

Files

FakeLogonScreen.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ