TT COPY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TT COPY.exe
Size

709KB
MD5

8b5ce13d92cabc133842ae8c3e6292c5
SHA1

66888518643c094d1ee4ab819b54579adba7541e
SHA256

02e5efb34c7a49fdfa2aa6e1399060c94f2de759c15040aaea1499062a3f9901
SHA512

b664cb466b806a4277c5ffb5b93acb6d794e25f351a6cfada0c4efafb0adc5493404ab19dd5522e005ef7011a61f5f0e65ac0e70023380d23995836acd5e110f
SSDEEP

12288:hEiJO0BLWwL/GQ6uldOxKKRKIVObwy7N+17lzDigH3C3bBKdUbHZU:3I04YGulQv/V+zN+FlzDXQKd6U

Score

1^/10

Malware Config

Signatures

Files

TT COPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 707KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ