TT wire copy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TT wire copy.exe
Size

1.0MB
MD5

f829f87b031e4e64a65a0d776e3da665
SHA1

1ff3a8cb1e7060a132f30bfd45e252b7585aacd4
SHA256

f33ae07437621873c5081880fabe8fb85e73804ed4bcc75cac6f520f219a2ce2
SHA512

f8e0e7c60a485c29ab7ef95594a651737b8a7f05f7243d4b04682334fc1b1ed99627c2aae22fe32caabc9b893f1e642aa57d07f979a680fcc7586ae4aaf8af29
SSDEEP

24576:NhehZnOsvXrndxOuKSTXP5prfYBENcTR:N6n/vBKSjPDZ0

Score

N/A

Malware Config

Signatures

Files

TT wire copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 906KB - Virtual size: 905KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ