Faturas de abril[.]scr[.]exe | Triage

Sharing

General

Target

Faturas de abril.scr.exe
Size

1.2MB
MD5

82dc097629bf39c66c1d5f363b8e7aee
SHA1

90ff9008b40de2057d40b3d1b262e547927c23ab
SHA256

e3c775114e28518051b469cb95d6668aa037b6bb52219198694146dbf2a359ad
SHA512

dac47415337697d2fd3eace52cdbad61493e247fa1f46396962af678199ef0e7aaafa93d98caa7635afa8081e85edd84597d8aee59ea1f2c17da8391de773a58
SSDEEP

24576:vSu1S82mBVrIiudqePxlncj4RW+pqoy/ttwcWBSq7C:vSuU82mTVonC40aqocfwJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Faturas de abril.scr.exe

Files

Faturas de abril.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ