HBL-SO200347X46FHTY_4775BMGGXX[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HBL-SO200347X46FHTY_4775BMGGXX.scr.exe
Size

126KB
MD5

7e9a009322b63b1bca4ffd3b151553e8
SHA1

3c843c6e9d0ce6c0a26569daa732afef0eee1f46
SHA256

8e0a304aa9a032b4c657320a890d26163e54c014386348354afeda0803f02165
SHA512

d60e5ba499cde5a0fd0edaff7ce71f16668e7bc46e8cb7edfff9ed42f6557438463a2262f31066958f91bd9830566c8bf42813e462e22e02a72c2ad592880af6
SSDEEP

3072:NWpY6oDXvaif4Pd6RYeqh87/ai/5RJX7:01oDXvhf4QKed77RJX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HBL-SO200347X46FHTY_4775BMGGXX.scr.exe

Files

HBL-SO200347X46FHTY_4775BMGGXX.scr.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ