Static task
static1
General
-
Target
Versa.wtf_robloxtxt.scr
-
Size
58KB
-
MD5
0b994f6931e0ae689adc17b8a6650629
-
SHA1
3ff8e1de8d839a71331fb1d2e6afa0ed29eea609
-
SHA256
e357135bee468ba798b556dec8ceba0d38db2eaff80055ab6650e7c03c16805c
-
SHA512
c89e84348a74d2886545e9ca6ffc451a4f2a5134f3e874b2eb9e78f1f2acefb2dec85cbf41bdbf3630d798a6cebf9aa69ad1b46b7ccf747e24462df3205fde4f
-
SSDEEP
384:Mi38dDnaxg679BwKCcbeuiyOgW+vvRiBDeoww4glQhgLU07kRI0VxdahYMMmncdb:/s9naW+95CcbKv5qvkBDxLc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Versa.wtf_robloxtxt.scr
Files
-
Versa.wtf_robloxtxt.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.toad Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc1 Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ