Static task
static1
Behavioral task
behavioral1
Sample
TT Copy.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TT Copy.exe
Resource
win10v2004-20230221-en
General
-
Target
TT Copy.exe
-
Size
678KB
-
MD5
49b64e415d7d80099fe079b57879e930
-
SHA1
202495e27168431afd0ce4e57eeca037acd784fd
-
SHA256
5ee727653b9e6ded021959d91650e3d23c1586b14ed1d22d84c8b3cd5f7e634a
-
SHA512
72479984aaa3b97c701bd97f5ceba2de9bc4fce17b95cfbe27719dd44569a4fdd8d3771a367941370abd4fd9bd7d1008d24c278f72ed827bc929406508ad7924
-
SSDEEP
12288:+eJ/sIU9Thtw2th1kfQe4fiGL0c4dwuS3iQRpS2Z5RzG1edBSj81tVimOMt+E:SHwqh1kIev40c43AiQ22zRzG8dA8imX
Malware Config
Signatures
Files
-
TT Copy.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 670KB - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ