Static task
static1
Behavioral task
behavioral1
Sample
SCO9.scr
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
SCO9.scr
Resource
win10v2004-20231127-en
General
-
Target
SCO9.scr
-
Size
1.3MB
-
MD5
213e3241ee3fe169528b3c1d799c4567
-
SHA1
4e18a0d39e6e91bd68c96ea0b7653a46869b67b2
-
SHA256
adbf66641d762e21ec3d540df850123223e644872bc4669fcc43347563809b4e
-
SHA512
8b4aca974a87e057c7397fdc1c45c94d7edf3dc1aa005fcf8e7030af15ded3db0714d2413342c1947fa68135ad32c1b99fa52270db8d72fb6e7e1e46fa90fedb
-
SSDEEP
24576:UIgVxmD6Y99SpqywVUlNQzP3oAluG39Jrfn+5WtXWu4iD7F+nysVVYiTo:UC/7CwVcCj3pl939V+5WtXWviPInSi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SCO9.scr
Files
-
SCO9.scr.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ