Static task
static1
Behavioral task
behavioral1
Sample
IMG-1679986541237.scr
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
IMG-1679986541237.scr
Resource
win10v2004-20231127-en
General
-
Target
IMG-1679986541237.scr
-
Size
13KB
-
MD5
366b781759e5b5933efa847a3ce116f5
-
SHA1
7ca35935c9b6923ba26e8f4fa84f684006d62922
-
SHA256
807cff51ce993ea62bc69ecf40db77cece474f15a578aa43774be66969b313d5
-
SHA512
f8b86ea112d868e34b6a6dd5dc6c5a2c589e550149b4929e40cd4b333a32d9e8371572bb47ee075216632c991d5c55fcd0b5fddf024d1cb69656fed3acd8f654
-
SSDEEP
192:ACoBpQE3Qpx40XgwA5LqtBuoo79ED6079U:YBiE3Qc0XgwuvM9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource IMG-1679986541237.scr
Files
-
IMG-1679986541237.scr.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ