adminn[.]scr[.]exe | Triage

Sharing

General

Target

adminn.scr.exe
Size

864KB
MD5

30f6c45a4b1e83ddcb7cde070f81ce7d
SHA1

68e82e6d01ccb9f15b14a6858aef13710b7eea5e
SHA256

b2485787dd9753b8bd558f63c62c9e234ba5e29a22131545af2a642318f2e0ca
SHA512

83a51516a6443494a1eab57d97daf58e98e6795696e65110692148e3542d6d880a5b0d60a96aea8f11c24ffb4d4ac83488705e40225e4f974a6cee0b20b86d30
SSDEEP

12288:c8pYTbiznIwAfExOC001UtDu3kq8fxL9g5s6+6sGgThgUSD6bQl:HpYqnI/MxOMXurgfohaObQl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adminn.scr.exe

Files

adminn.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 861KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ