TT COPY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TT COPY.exe
Size

904KB
MD5

61ad3d0f68d1dff90658c505237b3012
SHA1

9d20cc3d3f5d15db1ffd963dddf82b59971250ce
SHA256

3ef08f39f739e970a5e143decd013ff75086300f30aea4441c33b609f4c2e9d5
SHA512

d91f09e6998ee889f109a3e4e6f8f26c320b909157b2871dd14793d8e41c96bd87a4702dd121f7f66688022126a7a786a3e1c7592ed35689e2c77fe89487facb
SSDEEP

12288:Aho8gUN5lcQ5cKT75hb/POLKQbfNlDc4P37uCtUYSe0ZT6aSgT3nb3BSMz+VjIux:G5cE5hWFCs7uCtUYWEaSgjbsK+lIw

Score

N/A

Malware Config

Signatures

Files

TT COPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ