ttref01312023[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ttref01312023.exe
Size

543KB
MD5

ef6918b487facdd63bba6fa5d8850919
SHA1

6d00761248bed857b4308342e961051a0c0d1729
SHA256

ad91d9c25c37a161fe7634058d8b18347f0aaf97e26e3596f745dcadc47c906a
SHA512

3482e7669992a230a4ecad2fda45080a66d532a935b565973591e4702211df248e66c2d5f4232b934b2539656c8c964deff20f67dda73708f6d78660596bf9f3
SSDEEP

12288:fr80FsGpHwMJe8TFGMI7rQV+xTV4gYv5klA9i7+pvfCWtO:fr8MlpHw0e3brRxm9BJw6RKh

Score

N/A

Malware Config

Signatures

Files

ttref01312023.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ