Scythex[.]exe | Triage

Resubmissions

13/09/2024, 12:21

240913-pjd26a1dpf 6

13/09/2024, 12:18

240913-pg5gbs1dmh 6

Sharing

General

Target

Scythex.exe
Size

529KB
MD5

63e05804c65dd8d72d2fd286c27a9e19
SHA1

c6eb8b2f651c56c64c87f51d2a37588192d0c2a9
SHA256

e0a021c290eca534d50a5b52c15b72643686ff2b6e9c6bdeb603ad55210aaeee
SHA512

7dd0246e278972df019a7b6ae2e23cc62666a8e4c3810a185f06a510e69cefd7314b6cabc9f7f720ab54e7b260f7563763aff61a7fc26a65797c8968cc330b13
SSDEEP

6144:vAyGAD00JYM29Ge0dUL9rVIbXicppurpXcFGz/qkUugbXIIyDHUoMaSdbROQe075:MB9GJIAicuDz/vFuo/MF7zr+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Scythex.exe

Files

Scythex.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\adus0\source\repos\Scythex\Scythex\obj\Release\Scythex.pdb

Sections

.text
Size: 527KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ