Static task
static1
Behavioral task
behavioral1
Sample
text.scr
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
text.scr
Resource
win10v2004-20231215-en
General
-
Target
99720c1f92240fafbd7043af2c81d501
-
Size
76KB
-
MD5
99720c1f92240fafbd7043af2c81d501
-
SHA1
f1d212a00f01a270a5d26d6e7dd6da9b877d2487
-
SHA256
3fe5a4c91a9aaa512e3ad94fada750ee34eeb97d602368dd5edd97aa55a98361
-
SHA512
618e84041acb34e42e2f0044d0427d59e325ebdaf7101532160fded918897727a47dd9e29be3e21b9ea62ad027af3b6fcf3884a1e8c0fa0045dd30b690e96c7b
-
SSDEEP
768:JhrjraNxlczzRHJ63AtecEoDecpJpDnxf6OC0conu4IO7migLV7NMDoLCSSSSSS1:JtOPSbjxlpfrgonuWmvntA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/text.scr
Files
-
99720c1f92240fafbd7043af2c81d501.zip
-
text.scr.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 37KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.teraphy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE