scout-windows-amd64[.]exe

Resubmissions

08/09/2024, 03:47

240908-ece1rswejg 3

08/09/2024, 03:44

240908-eajwyatgpm 3

Sharing

Copy URL Twitter E-mail

General

Target

scout-windows-amd64.exe
Size

9.5MB
MD5

6b6f0b9431ef94c8a01d4198d4306abc
SHA1

7524d176dc3a75c1824a7fc16f1a44c9318c65a0
SHA256

94e8b862037cb7b5404e2c3ba0d4bdcd80efbaa901f9b147145afe2237745f10
SHA512

f3de09377c2f134eb9f0ea9ecf8203a07b154c790f6aefb09e1863fdb7bfc1201959d1c96c672fe4cba8184fe9d451572b0c84523321ef128e148f93d3110e57
SSDEEP

196608:4574A51udaHsKY7+vDv6cfTpseGYM+kpiXikaon:kZ50a8ivDS2pxtkp1kaon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
scout-windows-amd64.exe

Files

scout-windows-amd64.exe
.exe windows:6 windows x64 arch:x64

f0070935b15a909b9dc00be7997e6112

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
WriteConsoleW
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
LoadLibraryA
LoadLibraryW
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 378KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 281B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 405KB - Virtual size: 405KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 76B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 483KB - Virtual size: 482KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 543KB - Virtual size: 542KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f0070935b15a909b9dc00be7997e6112

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 3.5MB - Virtual size: 3.5MB

.data Size: 378KB - Virtual size: 507KB

/4 Size: 512B - Virtual size: 281B

/19 Size: 405KB - Virtual size: 405KB

/32 Size: 113KB - Virtual size: 112KB

/46 Size: 16KB - Virtual size: 15KB

/63 Size: 47KB - Virtual size: 46KB

/80 Size: 512B - Virtual size: 76B

/99 Size: 709KB - Virtual size: 709KB

/112 Size: 483KB - Virtual size: 482KB

/124 Size: 155KB - Virtual size: 155KB

.idata Size: 1024B - Virtual size: 914B

.symtab Size: 543KB - Virtual size: 542KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 3.5MB - Virtual size: 3.5MB

.data
Size: 378KB - Virtual size: 507KB

/4
Size: 512B - Virtual size: 281B

/19
Size: 405KB - Virtual size: 405KB

/32
Size: 113KB - Virtual size: 112KB

/46
Size: 16KB - Virtual size: 15KB

/63
Size: 47KB - Virtual size: 46KB

/80
Size: 512B - Virtual size: 76B

/99
Size: 709KB - Virtual size: 709KB

/112
Size: 483KB - Virtual size: 482KB

/124
Size: 155KB - Virtual size: 155KB

.idata
Size: 1024B - Virtual size: 914B

.symtab
Size: 543KB - Virtual size: 542KB