IDR-500000000[.]scr | Triage

Sharing

General

Target

IDR-500000000.scr
Size

1.5MB
MD5

c3af78c466127936893943c095f790e0
SHA1

221dd79a6b446fc059e8c2a3a835d323dc7f7de3
SHA256

ec7b4f45fbfc555e24bbf4b2f0e3659695a0c1b3ef5c343252e9a995d3108f4c
SHA512

d50a79a13afbcd2f877874b68cd10ccdb57aabc29389a4698fa461ae5c432f912817e3bcfd15929b0dc4c8af17673871adc93a7841c52a18119d43a46fda117f
SSDEEP

24576:rnmA81BdYN+ZlMbEJPALsbH65YjtPjTgiEO3DuBseKTfasKkeaYd1d6KU4i3T+X0:IvZabE7aShPZPzuZMtsaYtt9Zkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IDR-500000000.scr

Files

IDR-500000000.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ