Screenshot29_03_2024[.]scr | Triage

Resubmissions

09/04/2024, 07:32

240409-jdajwsch5v 3

08/04/2024, 12:27

240408-pmqkcshb43 3

08/04/2024, 12:13

240408-pdt67agh46 3

08/04/2024, 12:08

240408-pa1vkaca7z 3

Sharing

Copy URL Twitter E-mail

General

Target

Screenshot29_03_2024.scr
Size

138KB
MD5

b6d5306c1f309d4a92797c59bc767c0f
SHA1

f2ad592bc6633b114697f7ac106aed60b2260aae
SHA256

6322fcd08d58c413977fdaf23851f3af2f8106b41159e40b988dd4465c975531
SHA512

c13a92dfac66e7dfa6c6c8faa014d5e883dba9bafebd48f9158d41d8a2b0b0c8b88d7cef853d9413e7d0ef51a8637117c3dfb8635b5438504903bb5f32e2d2bd
SSDEEP

768:PCIFqeMmKeSdMXbOfq1gkpXnOwJoL7REpOhTG4lC9v3+vCGcCdnA:PC4qeLAd0bOipXnqJh64lC9v3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Screenshot29_03_2024.scr

Files

Screenshot29_03_2024.scr
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ