NOTIFICATION_TELEX_RELEASE_IMG[.]scr | Triage

Sharing

General

Target

NOTIFICATION_TELEX_RELEASE_IMG.scr
Size

752KB
MD5

82dff7121aca0c1db850c00e2ed7b6e5
SHA1

71c1ad2df3a63a9ce673a3fc573bd55fa487cc2a
SHA256

6acee834fa468dc330f6f1d1029b7d99091225bded25097c887afd61f306d87d
SHA512

49408f8926f902ffe2bf1c33a3caa4023ec94849b52b2a48e1b48b0b7e48ecd2ab30349bb344da431e1bdfdfead98b7631827a5af6914620035b78711660426d
SSDEEP

12288:uJ0YOwqHFfm9iZZTZrl6sAKehTBpIRVdjJcko/WHOhSkfKw:uvO77isALIHds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

NOTIFICATION_TELEX_RELEASE_IMG.scr

Files

NOTIFICATION_TELEX_RELEASE_IMG.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 664KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ