admin65009[.]scr | Triage

Sharing

Copy URL Twitter E-mail

General

Target

admin65009.scr
Size

437KB
MD5

ef871d49e5059cc3fbf90e670d47de59
SHA1

e9e6c57dc93c515872a61fe243a4f0d0cda2556f
SHA256

bd22078672bfcfb19ee7b5c91d48eda90441c414bf67c573da06787fb60b8621
SHA512

838f5e0d955bcb378f5f0105ba38aee92a7cf8cf787eaa76a24f97fb293a918e1d1249dd8fc73cb392657a9dd6ac1a06c1500ec1c5812ab0d66b2db2da3af9b7
SSDEEP

12288:s0Sou00CZurtsWamT1OOleyGE4u5MehF16MZS2nx5ttoY:QsZ51m1neyt4kMehusSKtt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
admin65009.scr

Files

admin65009.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 434KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ