emozx[.]scr[.]exe | Triage

Sharing

General

Target

emozx.scr.exe
Size

630KB
MD5

999fd16b07495cfaf344e58fb35307e5
SHA1

a4134a8e130938faa1213691318243b036a9f771
SHA256

4a5703d771554661fa318e46b5a16ce25f53c82544d974bdf38f440dbc7ba3dc
SHA512

939b57938ddc62264d6e1a4d93cde84be378475a748010de87dd52cc99791e77a8f95b13bbde4e1b21dd92105aae95b828bad9842d780d24bc7ba9d72c142cb2
SSDEEP

12288:m9V0tAlesYzgNYTVhS2QP0M2+7FkzEDeoIxf:7A4sYzgNYTVhS2QP0M26FkQDef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
emozx.scr.exe

Files

emozx.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ