Static task
static1
Behavioral task
behavioral1
Sample
Transaction reference number GLV211510801.scr.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Transaction reference number GLV211510801.scr.exe
Resource
win10v2004-20240508-en
General
-
Target
Transaction reference number GLV211510801.scr.exe
-
Size
195KB
-
MD5
ddff28aa2b32126e9262c113e0c06955
-
SHA1
473660a82b23f2cfb94219868ac794faf34ba0ad
-
SHA256
8530860589e3b57e9d71a184240d08b0e3e0bc3e9c7e19dd333f78427f7121b5
-
SHA512
b3617df259f20b009c359a4095b2a87b1525a86068b6838cd8e3f19c477e8bd236b909409be705703aa6b2f559d78202eecab812ea52a8f691989d711b86e660
-
SSDEEP
6144:YHl6VOCGuSjiJ6BfohvzYiyQisvMWCQtaWf:YmSjXay7s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Transaction reference number GLV211510801.scr.exe
Files
-
Transaction reference number GLV211510801.scr.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ