SEA - SO#L539 (SO+INV+PKG+ISF+VGM)[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SEA - SO#L539 (SO+INV+PKG+ISF+VGM).scr.exe
Size

469KB
MD5

33589bf899445d41b704d343064952c4
SHA1

48d3ed078d0f80f5f58ba890ccdced0aa273df43
SHA256

a1188a9a401d21e901cd3a52875c91c56d33b27c32ffa7631a7a1fcbd166c906
SHA512

78c49b0b949e40cc4302986a86158deee8cf918cecb6a800f766d66cdb514583e7128a23bf1c1e54ae3df63c3b6c9e603feb02667a8a82ca358887ce9a311799
SSDEEP

12288:Ii3hBXHSMveQwSrfnUUizPca2BsleGNFGA:BiM2/SDxizU9Bs6A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SEA - SO#L539 (SO+INV+PKG+ISF+VGM).scr.exe

Files

SEA - SO#L539 (SO+INV+PKG+ISF+VGM).scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

eALS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ