Static task
static1
Behavioral task
behavioral1
Sample
TT SLIP.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TT SLIP.exe
Resource
win10v2004-20230220-en
General
-
Target
TT SLIP.exe
-
Size
200KB
-
MD5
8afdb4f8f3860c814c09574374c76c1f
-
SHA1
7c23925b2b5be7ef54429b80338d816d29d9a17e
-
SHA256
3687644dca0770447d6d7fc199e71507b2d8696c12ee478e9615c082dcfec631
-
SHA512
0c17229f10353df820beeb6c149d14f5d5e8434e6780faada271d68e233761a871dc173296a9cffe2adb1d89cc99ccc15ba554be59eec6fdfb22da045a259cea
-
SSDEEP
3072:W0x7ByIAtY8yrxdhucJRpufi2I6sd7ILRMuTRrl6EXXO8rdP6oN3wGVH4dGBox+I:T7ByIAChxd0KRperI64C4f8hFlwCBLI
Malware Config
Signatures
Files
-
TT SLIP.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ