SchTask[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SchTask.exe
Size

449KB
MD5

72b5a25a3015b0e66ce95c038d708228
SHA1

3b315c2834aeb8560948431f662f8e843698bca6
SHA256

d41836c519e9cff8e4c2f688f3b9982fb5cdcd05dde301bb76f224408df6ecfe
SHA512

373ee7c15b2414b2119fdbd0886b9d976365b0f2bfea6327db466252f79fa838fe42cadc5c14203ef6378d881831ec2155a6bb05981424754b9281159e8c7a64
SSDEEP

6144:Yq5r+o2DqT5B1TsVXDDWdIWSeRwmd8H8HFR8GwRjskfV3AzZYbOlAOFcz5D8xc3c:YIr+o2DqR8GUskfhAzZYyKqT4Ezi9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SchTask.exe

Files

SchTask.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 447KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ