DELAY NOTICE - ONE_FORTUNE - 001W (MD22425W)[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DELAY NOTICE - ONE_FORTUNE - 001W (MD22425W).scr.exe
Size

639KB
MD5

2426c7c7722859f4b383694f38fc21ad
SHA1

a2cc9f96596ac8d7ac3dc9640f52cc5bb0e82779
SHA256

5494c788d973660b6e3f765d74abc6b737375b4ee864fbb5e7ba5ece4db3a308
SHA512

8956898e5ab1b10bb1c152d8a15f1c68ef5853fe28ae321bd4697af75141455a578e8cf497049ce086474dcb04c053945fdae33bc15172921ca96212cae8876a
SSDEEP

12288:rCc0jBN2iN/Qw+xzdmQsi7LsHRrM9Ah+Asr07C4L14GB3:rCc0jBN1FQPdBsiP394DRT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DELAY NOTICE - ONE_FORTUNE - 001W (MD22425W).scr.exe

Files

DELAY NOTICE - ONE_FORTUNE - 001W (MD22425W).scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wjec.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ