567890760980[.]scr[.]exe | Triage

Sharing

General

Target

567890760980.scr.exe
Size

770KB
MD5

2dcd12a2792c0f2cb39ecd4c7e20ab4f
SHA1

d5fc868e09452d93f513620bf597daceed71f3ee
SHA256

49a6d4dde10788e5000df6a0fad4be9ab17567fd1314b64c3d7be0257adcbc65
SHA512

de7e706e6cdb87b018d6436abb2fd44f1a496de9c914fcbd8aa722bb04123c627aab905c125f8ee7a4d95fe029598b1d34f232b72dc26b3831cf98f0ccfba292
SSDEEP

12288:w1ZF8Kmih8yenE8TL9XnbHBPSrwLokrRWh1Y8CRLfvTWsuXPRZtdAiMuL3TeB:wylihWhX9nV60skr+vCRLfLUXdd6uY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
567890760980.scr.exe

Files

567890760980.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RTBd.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 767KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ