LETTER[.]SCR | Triage™

General

Target
LETTER.SCR
Size 29KB
Sample240721-dpc69stcra
SHA256 fff81cc8b1c1277ff1f6bc5b3a0c9a1c997e7048b2feed7c6e053da0e3f5686a
MD5 931c4b1cc972c8b8b260cf3625bd0f9d
SHA1 d3075323257c30a00a4eaaf5fd1e081280d82225
SHA512 d85dee0a3ad833ddbbb15cfc0f21b98847389a49ba8f264d6ee5d3b1f9b292230864a65af14a5e1763af50d387b9f5927cbc0c2c5d26b7931d42e79e7b459453
SSDEEP 768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/BZ:AEwVs+0jNDY1qi/qn
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LETTER.SCR

SHA256 fff81cc8b1c1277ff1f6bc5b3a0c9a1c997e7048b2feed7c6e053da0e3f5686a
MD5 931c4b1cc972c8b8b260cf3625bd0f9d
SHA1 d3075323257c30a00a4eaaf5fd1e081280d82225
SHA512 d85dee0a3ad833ddbbb15cfc0f21b98847389a49ba8f264d6ee5d3b1f9b292230864a65af14a5e1763af50d387b9f5927cbc0c2c5d26b7931d42e79e7b459453
SSDEEP 768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/BZ:AEwVs+0jNDY1qi/qn
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

65572

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths