Static task
static1
Behavioral task
behavioral1
Sample
05-30-SO# 5483 (SO+INV+PKW) - 531結關KEE-LAX cfs SO# 5483的 ISF (10+2) data.scr.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05-30-SO# 5483 (SO+INV+PKW) - 531結關KEE-LAX cfs SO# 5483的 ISF (10+2) data.scr.exe
Resource
win10v2004-20240508-en
General
-
Target
05-30-SO# 5483 (SO+INV+PKW) - 531結關KEE-LAX cfs SO# 5483的 ISF (10+2) data.scr.exe
-
Size
953KB
-
MD5
5779ae9ecf6ce4d3bb7c5e59d809c05c
-
SHA1
ae6d0d5659090b795198ec6ee4e1072890d1785a
-
SHA256
1f350a9bcaccdb51ef9e784c123fb27099be181fcb39f9bac5130c4cedc190b1
-
SHA512
e915b47ac07f7a618407361e1d12a48a19726ff8cc2ec08da548eb324fd9bc5561d719f0a3f28521264f7619cbc6e8a3d47743c4eebb83314bc46dc88c26a47d
-
SSDEEP
24576:xcV0G+pAuwIZbV6pCvQ2VedTp58iVLEo:6V0XpAujbV6p4VeJQM4o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05-30-SO# 5483 (SO+INV+PKW) - 531結關KEE-LAX cfs SO# 5483的 ISF (10+2) data.scr.exe
Files
-
05-30-SO# 5483 (SO+INV+PKW) - 531結關KEE-LAX cfs SO# 5483的 ISF (10+2) data.scr.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 943KB - Virtual size: 942KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ