TSMApplication[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

TSMApplication.exe
Size

1.5MB
MD5

72c4380ee0d19b7b76196b488e2dfd39
SHA1

3218615f7f202ab293ceef7c33fb52db21afc3c5
SHA256

066e21a906f954d8054ca8601ba2663998aa9018ae47a8a8db398111e973f7ef
SHA512

081e6b8295ef486aa2324b6ab106904416fce99248f2458c52feeff9f456622839dd70dac3272fb60653902c604bfd77b6c83fff38359289f586667ebce97542
SSDEEP

24576:fuubZeMX2WLFaPPCsppdUtAyHW21CnVC/bbO:fuubcykNy221CnVQb

Score

N/A

Malware Config

Signatures

Files

TSMApplication.exe
.exe windows x86

e81f542c96c4914767ab7bb2030a402b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxW

python34

Py_IgnoreEnvironmentFlag
PyImport_FrozenModules
Py_SetPythonHome
PyMem_Malloc
Py_SetProgramName
Py_GetProgramFullPath
Py_Initialize
PySys_SetArgv
PyDict_New
PyEval_EvalCode
PyEval_GetBuiltins
PyDict_SetItemString
PyObject_CallMethod
PyList_Insert
PyUnicode_Decode
Py_FileSystemDefaultEncoding
PyUnicode_AsEncodedString
Py_FrozenFlag
PyErr_ExceptionMatches
PySys_GetObject
PyObject_CallObject
PyImport_ImportModule
PyUnicode_Join
PyObject_GetAttrString
PyErr_Clear
Py_Exit
PyLong_AsLong
PyObject_Str
PyErr_Fetch
PyErr_NormalizeException
PyUnicode_DecodeASCII
PyTuple_New
PyUnicode_Format
_Py_NoneStruct
PyUnicode_AsUnicode
Py_Finalize
Py_NoSiteFlag
PyExc_SystemExit

msvcr100

_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
wcstombs
mbstowcs
__argv
__argc
setlocale
_amsg_exit

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e81f542c96c4914767ab7bb2030a402b

Headers

DLL Characteristics

File Characteristics

Imports

user32

python34

msvcr100

kernel32

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 346KB - Virtual size: 345KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 346KB - Virtual size: 345KB

.reloc
Size: 5KB - Virtual size: 4KB