VIRUS_FILE[.]scr | Triage™

General

Target
VIRUS_FILE.scr
Size 900.6MB
Sample260808-1aeswafe28
SHA256 e8a378b0f1256b0eda320641f07cf65785212455073b9f9dfa4bd1af3e56b270
MD5 44ca202ab37902f9862aad0c8ef02f19
SHA1 3053b6d2b1d58249e3dc2c77499270eef28f6404
SHA512 5abf55010d5eb8d7f1a3f0ada021eb877f2d44f06b7d6bd8d216d11b1826db4817a74e1fb6e8563538a2cc3bd4cda669690f4f25a0bd29a06db6a8fccf8b0ebf
SSDEEP 6291456:6Astm9VBCb82quTerVfZ9yIRT64jDYkjzKScUUxr9DLUoFb:LhEbozZ9x6sYk/JNUTDLN
TLSH
T140A933BF10A18064E6AEF4B9CE31B90DA52D7B1740C157A30F29D96D31ABD48250DFFA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VIRUS_FILE.scr

File Explorer

VIRUS_FILE.scr

.exe 900.6MB

VIRUS_FILE.scr

SHA256 e8a378b0f1256b0eda320641f07cf65785212455073b9f9dfa4bd1af3e56b270
MD5 44ca202ab37902f9862aad0c8ef02f19
SHA1 3053b6d2b1d58249e3dc2c77499270eef28f6404
SHA512 5abf55010d5eb8d7f1a3f0ada021eb877f2d44f06b7d6bd8d216d11b1826db4817a74e1fb6e8563538a2cc3bd4cda669690f4f25a0bd29a06db6a8fccf8b0ebf
SSDEEP 6291456:6Astm9VBCb82quTerVfZ9yIRT64jDYkjzKScUUxr9DLUoFb:LhEbozZ9x6sYk/JNUTDLN
TLSH
T140A933BF10A18064E6AEF4B9CE31B90DA52D7B1740C157A30F29D96D31ABD48250DFFA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

150464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

AUCElevation AUCRotateTowards AddVelocityPan AttestationNextHopViewport BlendChallengeEdge CheckboxDynamicBinding ChipUnseal ClaimCompact ComboboxHeartbeat ConsumerDewChunk CrossContainerLogit Disabled DragBurst DrawerEmbed EnclaveNormalmapKinematic EvaluateWaypoint FieldFreezeTile GradientFlip GradientSmoothDamp HeadDecapsulate InterpolateTrainRouge JointNonceNavmesh KinematicDeadline LateUpdateAmbassador MaskEvict MorphChallengeResidual NormPacketLoss Orchestrate PKCEStateElevation PasskeyShadow PersonalizeConclude PoolWrapTap PrefetchBulkhead ProjectClampRecall PropagationAnisotropyBinding RagdollConstraintBack RagdollHealthCheckResidual RateLimit RaycastBaggage ReconcilerScheduler ReconcilerSlide RecursorClassifyRate SealingValidate ShadowMultiplex SlideTrace SliderResumeKinematic SmoothDampHeartbeatNDCG SwitchChallenge TeleportIntrospect TickScalePattern TokenizeChunk TorqueMatch TorqueTimeout TraceRotateTowards TurbulenceCircuitSchedule VacuumBackprop ZoneShrink _AUCBackoffLease@24 _AUCRolling@8 _AUCSpawn@24 _AccelerationProcessor@20 _AccordionHandshakeMipmap@12 _AccordionSnackbarTrigger@12 _Activate@28 _ActivationPathTransition@20 _ActiveEnclave@24 _ActiveRate@12 _AdaptiveBaggageProject@12 _AdaptiveFillNDCG@24 _AdjacencyPropagationFreeze@12 _AggregatorSlide@8 _AlbedoDiffGraph@12 _AlbedoFlipJitter@20 _AmbassadorRetry@12 _AnimateFocusGesture@28 _AnisotropyGradientApplyForce@16 _AnisotropyInterpolate@20 _ApplyTorqueLatency@8 _ApplyTorquePingVelocity@16 _ApplyTorqueReconcileFill@24 _AttendFilter@16 _AttentionExponential@16 _AttentionMigrate@12 _AttestationEmbedMinibatch@24 _AttestationEpoch@8 _AttestationNAT@24 _AttestationPing@8 _AttestationRotateTowardsSpring@20 _AvatarPositional@8 _BackoffBatch@20 _BackoffFixedUpdateSalt@8 _BackoffMAP@28 _BackoffQuote@20 _BackoffRenderEpoch@20 _Backprop@24 _BackpropConsumer@16 _BackpropRigidbodyAttend@8 _BaggageBleuSweep@20 _BandwidthForwardHop@20 _BatchLatencyPinch@12 _BatchPaginationInit@20 _BeamSnapshotPepper@24 _BeamStateless@12 _BindingConsumer@16 _BiomeVelocityFeedForward@20 _BiometricGoodputElevation@8 _BlendRegressInit@20 _BleuGestureReassemble@12 _BleuLogitSpring@20 _BloomPropagationResponse@24 _Blur@16 _BlurMargin@12 _BlurThroughput@16 _BorderBleuRevoke@8 _BorderResponsivePad@8 _BorderShadow@16 _BorderSlide@12 _BoxcastQuote@20 _BreakerConcludeMeasurement@16 _BreakerThaw@24 _BreakpointTriggerPan@12 _BrokerPatch@12 _BrokerUnsealFeedForward@16 _BulkheadBackpropDropout@12 _BulkheadHandler@24 _BulkheadHeadRolling@16 _BurstBackoff@20 _CEBackpropRate@24 _CEProvider@20 _CanaryDaemonRefresh@8 _CanaryManager@24 _CanaryPacketLoss@8 _CancelFlushPacketLoss@20 _CancellationAdapter@24 _CancellationScale@16 _CardBackPositional@12 _CardBandwidthRoute@8 _CarouselCold@12 _ChallengeProvider@20 _ChallengeWarm@20 _CheckboxPartitionDaemon@24 _ChunkHandler@24 _ChunkRagdoll@8 _CircuitBreak@20 _ClampStep@12 _ClassSpan@8 _ClassifyRagdoll@8 _ClothResumeCanary@16 _ClothTopologyStep@12 _CloudAttend@24 _CloudRotate@12 _ClusterDehydrateSkip@16 _ClusterPepper@20 _ClusterScrolledBackoff@16 _ClusterSkip@8 _ClusterSubscriberGradient@16 _ColliderRotateTowards@12 _ComboboxPopoverNDCG@8 _ConcludeFocus@20 _ConcludeMultiplex@24 _ConcludePersistentScale@20 _ConsensusResume@12 _ConsensusRevokeCollider@20 _ConstraintMigrate@12 _ControllerFieldEmitter@16 _ControllerProjectRigidbody@8 _CorridorRecall@20 _CorridorSpherecastQuery@24 _CorruptCircuitVortex@8 _CorruptDemultiplex@8 _CronHandler@12 _CronHelper@16 _CrossEntropyBlur@12 _CrossEntropyPad@24 _DaemonMipmapDeadline@28 _DamperRagdoll@12 _Deadline@12 _DeadlineCircuit@12 _DeadlineGestureFade@16 _DeadlinePoolBackoff@8 _DeadlineTrain@12 _Decapsulate@20 _DecoderBoxcast@8 _DehydrateSpawnCanary@20 _DeploymentScan@20 _DeprovisionAddVelocityKinematic@24 _DeprovisionNavmesh@24 _DeprovisionOrchestration@8 _Detect@8 _Diff@12 _DiffSpacing@24 _DiffTrainTimeout@16 _DiscoverSpring@24 _DiscoverThroughput@20 _DragPaddingBandwidth@16 _DragSweep@8 _DraggedActivation@20 _DraggedSafeArea@24 _DrawerMergeLogit@16 _DrawerPaddingMask@24 _DropoutWarmGraph@24 _DroppedFailoverEnclave@16 _DungeonSeal@28 _DynamicAdapterRefresh@16 _DynamicExponential@24 _ECNNAT@16 _ECTActive@12 _EaseResumeAnisotropy@12 _EdgeTriggerThroughput@16 _EgressProvision@20 _ElevationNAT@24 _ElevationNonceVacuum@20 _EmbedPerplexity@20 _EmitterKey@20 _EnclavePerplexity@24 _EnclaveSpring@12 _EnclaveTokenLerp@20 _EndpointQuorumShadow@24 _EntropyDialBatch@8 _EpochForceful@8 _EpochSkip@12 _ExchangeApplyForce@16 _ExchangeF@12 _ExchangeRebuild@16 _Exponential@16 _ExponentialAcceleration@24 _Extrapolate@16 _FManager@24 _FadeFailoverCanary@24 _FailoverCircuit@16 _FeatureMergeBorder@20 _FeedForwardPropagationActivate@16 _FilterProvider@24 _FilterResolver@20 _FilterSweep@24 _FlushGap@24 _FocusCancellation@20 _FocusDecapsulatePan@16 _FocusEdge@16 _FocusExpireSpan@20 _FocusPressedGesture@12 _FogFragmentBlueGreen@8 _ForceStateful@20 _ForcefulRateLimitRollout@8 _Forward@12 _Freeze@24 _GapAdjacencyEnclave@24 _GapPanFocus@16 _GapRegress@16 _GapResolver@16 _GestureDemultiplex@12 _GestureExponential@20 _GestureRolling@8 _GestureVortexMinibatch@24 _GlossFBurst@20 _GoodputEmitterSoftmax@12 _GoodputPan@12 _GradientFLerp@12 _GradientFeedForwardBulkhead@12 _GradientResolver@8 _GradientTimeout@20 _GraphConsumer@20 _GraphLogitScan@20 _Greedy@24 _GreedyECN@24 _HairAUC@24 _HapticAdjacencyOrchestration@12 _HeadAttentionPositional@16 _HealthCheck@12 _HealthCheckBeamF@16 _HeartbeatBandwidth@12 _HeuristicHelper@20 _HeuristicRefreshStep@28 _HeuristicVortex@20 _HopArchive@12 _HopFeedForwardRepair@16 _Hover@20 _HoverFixedUpdateDrag@20 _HoverKey@20 _IngressUnseal@20 _InsetsGoodput@8 _InsetsNextHopFilter@16 _InsetsSpanRespawn@24 _IterationAnnounce@24 _JointRender@16 _JwtReconcileDynamic@20 _KeyProcessor@8 _KinematicDiscover@8 _KinematicPatch@16 _Knockback@16 _KnockbackMeasurement@20 _KnockbackValue@8 _LODBlur@16 _LODGradientNextHop@8 _LODRecallKinematic@20 _LSMCompact@24 _LabelGoodput@20 _LabelROC@20 _LagViewport@12 _LateUpdateFlushPinch@12 _LatencyBlueGreenScheduler@20 _LatencyDynamicPinch@8 _LatencyPressed@12 _LayerBreakpoint@8 _LeaseProvider@24 _Lerp@16 _LogitEdgeRigidbody@20 _LongPressRefreshRepair@20 _LossGatewayOrchestration@28 _LossIntrospectExchange@16 _LossRender@20 _MAPBreakpoint@12 _MAPPad@12 _MarginPacketLoss@24 _MarginRoute@16 _MarginStepExponential@12 _MaskAnnounce@20 _MaskManager@8 _MaskTunnel@20 _Memtable@24 _MetallicReadiness@24 _MeterDynamic@24 _MetricPerplexityNDCG@24 _Migrate@8 _MipmapDropped@8 _MipmapHapticRoundTrip@8 _MipmapResolver@24 _MirrorEvict@12 _MirrorReorderBackprop@8 _ModalPepperConstraint@24 _Mount@16 _MoveTowards@24 _MoveTowardsClusterDSCP@8 _MultiplexFocusRate@16 _NDCGDiscover@12 _NDCGHandler@20 _NDCGPersistentHandshake@8 _NDCGSnapshot@24 _NavmeshBackoff@12 _NavmeshECTRotate@12 _NavmeshWrapper@20 _NeuralSubscriberRouge@12 _NextHopStrokeBackprop@20 _NodeStep@12 _NonceProvider@16 _NormEmbedHop@8 _NsBack@16 _OcclusionJwtEdge@16 _OcclusionTokenize@20 _OcclusionVortex@20 _OffsetHeadNextHop@12 _OperatorAnimate@12 _OrchestrationForward@16 _OrchestrationManager@16 _OrchestratorRotate@12 _OriginBleu@20 _Overlap@16 _PaddingTruncate@16 _PaginationBounceSwipe@8 _PanHelper@8 _ParticleAttentionDial@20 _ParticleDemultiplex@24 _ParticleRevokeTrigger@8 _ParticleSnapshotDynamic@20 _ParticleTileAttestation@16 _PasskeySweepFill@8 _PatchRollout@8 _PatchWrapCollider@8 _PathPerplexityLongPress@16 _PathTimeoutScale@24 _PatternTimeoutReorder@12 _PeerBandwidth@8 _PerplexityBounce@20 _PerplexityOrchestration@8 _PerplexityPositionalStep@24 _PerplexityWrapper@12 _PersistentConsumer@12 _PersistentDeadline@24 _PersistentWrapper@8 _PersonalizeAdjacency@20 _PinchDaemonDiff@24 _PingRevoke@16 _PongRollout@16 _PopoverBackpropRagdoll@20 _PopoverStreamerQuote@12 _PosFreeze@20 _PositionalPersistent@12 _PrecisionConstraint@20 _PrecisionPersonalize@16 _PrefetchDynamic@12 _Pressed@20 _ProbMetallicF@20 _ProcessorBack@20 _ProcessorThumbSidecar@24 _ProgressMergeGap@20 _Project@12 _ProjectRate@16 _ProjectRoute@12 _PropagationConsumer@12 _PropagationProject@16 _PropagationProvider@16 _PublisherRigidbody@24 _QuoteActivation@12 _QuoteAdapterPath@16 _QuoteElevationStateful@28 _QuoteStackShadow@24 _ROCKeyDropped@24 _RadiusRestore@16 _RankBatch@16 _RateBatchBoxcast@20 _RateBurstFill@8 _RateRateLimit@12 _RatingRetry@8 _RaycastPinch@28 _RaycastSnapSpacing@24 _Reconcile@8 _ReconcileStartupBreakpoint@20 _RecordGraphEpoch@24 _RecordPathRetry@12 _RecursorAnisotropyKey@12 _RecursorConstraintBatch@20 _RecursorFixedUpdateElevation@20 _RenderDSCP@20 _RenegotiateCompactViewport@8 _ReorderReconcile@20 _RepairGradient@20 _RepairValidate@8 _ResidualBurst@20 _ResidualReconcile@16 _ResponsiveSalt@8 _ResponsiveTokenize@24 _RestoreMipmap@12 _RetransmitHop@24 _RetransmitJoint@16 _RetransmitSafeArea@8 _RevokeAUC@20 _RevokeExponential@8 _RollingBurst@16 _RollingPinch@20 _RollingRecommendInit@12 _RolloutStartup@8 _RotateDeprovision@20 _RotateMinibatch@12 _RotateMinibatchTunnel@12 _RotateTowardsAcceptResponse@12 _RotateTowardsSuspendResponsive@16 _RotateValidateAdjacency@12 _RoundTripRetryProbe@16 _RoundTripTriggerRenegotiate@16 _RouteManager@20 _RowEvict@20 _SafeAreaInsetsReassemble@20 _Sample@24 _ScaleChallenge@8 _ScaleNormalizeDuplicate@20 _ScheduleOverlapInsets@12 _ScheduleVelocity@20 _ScheduleWarmDeployment@24 _SchedulerActivate@20 _SchedulerApplyTorque@8 _SchedulerRagdoll@16 _ScoreScan@16 _ScrolledSetDragOrchestration@8 _SealingConsumer@24 _SealingDuplicate@12 _SealingQuery@12 _SealingStepperNonce@8 _SealingVacuum@24 _SegmentRoute@8 _SelfRadius@12 _ShadowRotateSafeArea@20 _SheetLearnerCE@16 _Shrink@8 _ShutdownHeuristic@16 _SidecarProcessor@16 _Simulate@12 _SkeletonPositionalAcceleration@12 _SkeletonRenegotiateAmbassador@12 _SmoothDampFill@16 _SnackbarHealthCheckDrag@12 _SnapTimeout@12 _SpacingActivate@24 _SpacingHelper@12 _SpacingManager@16 _SpacingRecommend@24 _SpacingSpherecast@8 _SpanAdapter@12 _SpawnCollider@8 _SpinnerIntrospect@8 _SpringInterpolate@8 _SpringRecall@24 _SpringScheduler@24 _StateTick@24 _StatefulGradient@12 _StatefulSidecarCommit@8 _StatelessBorderProbe@20 _StepFGraph@8 _StepHelper@20 _StepMaskResponsive@20 _StepSpherecast@24 _StepperScrolledDamper@20 _StrokeCron@12 _StrokeProcessor@24 _StubAttestationBandwidth@8 _StubConclude@12 _SubscriberPublisherBack@8 _SubscriberRebalanceSalt@8 _SubscriberSetDrag@16 _SuspendRate@12 _SwitchDeadline@12 _TTL@8 _TTLColdInsets@24 _TTLExponential@24 _TTLHealthCheck@24 _TTLProvider@16 _TabFieldChunk@12 _TapLODWrap@8 _TapRecallCanary@24 _TapTraceBreakpoint@20 _TeleportBlueGreen@12 _TeleportLivenessRouge@8 _TerrainClusterPacketLoss@24 _TerrainValueNextHop@24 _TextureAmbassadorGoodput@24 _ThawNavmesh@12 _ThroughputResolver@8 _ThrustRotateTowardsPath@16 _Tick@24 _TickConclude@12 _TileResolver@16 _TileVelocityAcceleration@16 _TimeoutClassify@16 _TimeoutJoint@8 _TokenBlur@20 _TokenGapHeartbeat@20 _TooltipIngressMargin@12 _TraceDSCP@12 _TraceDeadlinePadding@8 _TrainDespawnResponsive@12 _TrainROC@16 _TransformerWeightCollider@16 _TransitionMeasurement@24 _TriggerPressed@8 _TruncateMeasurement@24 _TruncatePattern@12 _TunnelRadius@20 _Unmount@20 _UnmountFill@8 _Unseal@24 _UpstreamSimulateExchange@12 _ValidateResolver@12 _ValidateValidateVelocity@20 _VelocityDiscover@24 _ViewportBackoffDehydrate@20 _ViewportSafeAreaRepair@20 _VortexChunkCircuitBreak@20 _VortexCold@16 _VortexCronCancellation@12 _VortexTeleport@20 _VortexTexture@20 _Warm@8 _WaypointManager@24 _WaypointTorqueFilter@24 _WeightProjectDSCP@16 _WindForceMask@20 _WindSimulateVelocity@20 _WindowTrigger@20

Name

.text

Size

146KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

358KB

Virtual Size

357KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

200.1MB

Virtual Size

200.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

VIRUS_FILE.scr

generic