scarface[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
scarface.exe
Size 6.1MB
Sample261027-2xzbgaxtfs
SHA256 aee792ee4552e28c533abab7992dd5ad542e8ff12806cbcedab300842d86f6f5
MD5 98b0ccce3d965776516145e4e6829d47
SHA1 d967335a3aca7f3c8c38bcadad74a3996e49c6ac
SHA512 969e4e33b8c50f0ebf0e3ff73b3b8c7e82cad2fb8a6bb9beabfb5698545b4922cf2c16a6967d83b6c6d9d70f28f8951039c507437643c4e7509c87038c722b85
SSDEEP 98304:sXL001Q5RTkvdBhh7uysLBOcN2i/Er60/IgoAL610hUdTx:sXA01Q5RTkbhhqysLBOkx85jmpX
TLSH
T1BA56BF05F25681F1C64A197C089AF76E867CEB5453393BC3F3A43E2B89697D04C3A6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
scarface.exe

File Explorer

scarface.exe

.exe 6.1MB

scarface.exe

SHA256 aee792ee4552e28c533abab7992dd5ad542e8ff12806cbcedab300842d86f6f5
MD5 98b0ccce3d965776516145e4e6829d47
SHA1 d967335a3aca7f3c8c38bcadad74a3996e49c6ac
SHA512 969e4e33b8c50f0ebf0e3ff73b3b8c7e82cad2fb8a6bb9beabfb5698545b4922cf2c16a6967d83b6c6d9d70f28f8951039c507437643c4e7509c87038c722b85
SSDEEP 98304:sXL001Q5RTkvdBhh7uysLBOcN2i/Er60/IgoAL610hUdTx:sXA01Q5RTkbhhqysLBOkx85jmpX
TLSH
T1BA56BF05F25681F1C64A197C089AF76E867CEB5453393BC3F3A43E2B89697D04C3A6C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5941171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.rdata

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

542KB

Virtual Size

542KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

665KB

Virtual Size

665KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

96KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

349B

Virtual Size

349B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mcz

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

scarface.exe

generic