TT COPY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TT COPY.exe
Size

817KB
MD5

209e994afda232eb814e9a26cb92487d
SHA1

e950e6f77fcf5b7648f14e2f190dd24b8ea1d66f
SHA256

20fd2077ea12e198a0aefd3b54f765bafcd3094d286373342c134d531745deb2
SHA512

f4e92abe6a0a0946121fb20da0b3f070601f1fa43c6fa5db799500af96f48f37cdc925dc2f03199df36a7a854d1242bd63006916b123ba0d681c4cc4d405b0b3
SSDEEP

12288:xhefaqG4yPaw6Fy2MxzD9r/dlpYZ6AhzMs83pG9q/3t7Ksf3:neSqG4yPaw6F0xHZpdgu1J/

Score

1^/10

Malware Config

Signatures

Files

TT COPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 815KB - Virtual size: 814KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ