Static task
static1
Behavioral task
behavioral1
Sample
TT PAYMENT.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
TT PAYMENT.exe
Resource
win10v2004-20220812-en
General
-
Target
TT PAYMENT.zip
-
Size
15KB
-
MD5
d022f157df3635ee28fc9c51f029f287
-
SHA1
6a297e66fa9603c22bb84ab6bed5347543ea1a50
-
SHA256
cb72d51bdc31dc4707480514dfc0cab72dba8546c585d1f11435837a840ca272
-
SHA512
8d9f5ac221f514b402ebf9af81f9c40312d7657a2833f226ee1e10ddc3fa19b2b3c7f0f19c4cae5a641488e75546a3f6e8aa6a9e7d4fa4d077276c80d230dd93
-
SSDEEP
192:W5XLFvEaTuO5ZUTTYVK5g2T1YALyGJ9NLf4rBEGGfX0HypSPUeNVSiI3IS+XCsj0:W5J5ZgrS2GGR4affXtpKJSiI3P+4qU
Malware Config
Signatures
Files
-
TT PAYMENT.zip.zip
-
TT PAYMENT.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ