Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Win32.Scar.tbxu.16998.26344.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Win32.Scar.tbxu.16998.26344.exe
Resource
win10v2004-20240508-en
General
-
Target
SecuriteInfo.com.Trojan.Win32.Scar.tbxu.16998.26344.exe
-
Size
2.4MB
-
MD5
4f1a8cfda914ec7f81b306bc5ffc5457
-
SHA1
b43485dac6dd758e332f2c58774f57db884cd570
-
SHA256
3b63f74430f0f907111835cef9b893790d92d73f01b31ffc7658e0727fa787b4
-
SHA512
2337cf360d10255e50fe1293d59d9b0fb41d08c8bd54302d8d1c22555e619eb2006fc5943ee6523114e9ab535b1b67193ce424b0bba55f20dda5386eb00a7328
-
SSDEEP
24576:Xw/QNTrxGrwEd8tej5OMZHAeSja9Pp724L3kAYmp0P+LAigPERRe5EZ9xlxYIUyO:XwcTrxUOpHjEPR2Bjm4Ri6ERR/xA68T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.Win32.Scar.tbxu.16998.26344.exe
Files
-
SecuriteInfo.com.Trojan.Win32.Scar.tbxu.16998.26344.exe.exe windows:4 windows x86 arch:x86
7d822e703163f50bbd66f901ffaa8e88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
SetFilePointer
CreateFileA
ReadFile
GetLastError
WriteFile
GetProcessHeap
HeapFree
lstrcpyA
GetFileAttributesA
lstrlenA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
CloseHandle
DosDateTimeToFileTime
CreateDirectoryA
RemoveDirectoryA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
HeapAlloc
SearchPathA
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetTempPathA
lstrcmpiA
lstrcatA
SetCurrentDirectoryA
user32
SendMessageA
GetDlgItem
MessageBoxA
PeekMessageA
CharNextA
LoadStringA
CharPrevA
CreateDialogParamA
DestroyWindow
shell32
ShellExecuteExA
comctl32
ord17
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ