tofsee | d9f803da959075689047d396cb80a4ab[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9f803da959075689047d396cb80a4ab.bin
Size

84KB
MD5

d9f803da959075689047d396cb80a4ab
SHA1

5b02aa10a4fc1f2999165ddc7024df5a5a59589c
SHA256

defa7151772a9a83718b9a83a6b819a35162c16bdbe3752359b798d27c7a84de
SHA512

d0bf955bc92a5612499fbf8a083cb2a29d8dc47745c945c271a0ca9607011fc515469f47e076c82ab860c75be4566d2ef7521d8e48c7fd23ce69c033f49b77d2
SSDEEP

1536:6k6s21VCn63TxSYWz+XTjFWL9ydpIcUc:6PVCnQxSYO+XF3pIH

Score

10^/10

tofsee

Malware Config

Signatures

Tofsee family
tofsee

Files

d9f803da959075689047d396cb80a4ab.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ