Static task
static1
Behavioral task
behavioral1
Sample
TELEX RELEASE BL +COO.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TELEX RELEASE BL +COO.exe
Resource
win10v2004-20230220-en
General
-
Target
TELEX RELEASE BL +COO.exe
-
Size
1.1MB
-
MD5
19bb6546c825bf116ac5713b8a52c546
-
SHA1
ea156592bb02777f8873e089acea166364c5ea65
-
SHA256
df98e5b50efcf7aedf479030e51ca5b9990fad9f0d20d729bb106198ddee923e
-
SHA512
54f496a02d83957b86cbb86415fbee03066f6e73f50d6c4e77e033e522819b452072b326405886ffd0c643b80679db8fc1a2f461b1e991d8077e4420b3d0f253
-
SSDEEP
12288:h5fFA0nE4hnR6aQdLOxd17b9r6hGBGhcS0+YL5mmklrbwh2n3wX6bnf9uB/GjAls:hfxF5QyxdV9g0ljerUggKTHRvF
Malware Config
Signatures
Files
-
TELEX RELEASE BL +COO.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ