TT COPY[.]r15[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TT COPY.r15.rar
Size

560KB
MD5

ba545c6798c2ca0eb08c47853b54b78c
SHA1

340b3b4663e9ad280dc79fa0b8c2556f4f4ebd35
SHA256

76c7864233d56b456f4041e79570dbfcfee25a27d1bed9c22d7ff2be4811101d
SHA512

87c49cf2d115dbe40b2e419a2be413720d80793d96d1d0f0781090807802f83010b8e258de2a076828da3228705718fd8eeed74387c93214e99881e7e56b6f87
SSDEEP

12288:InmG88ZE8o6lw2zu6qwSAVxfAgZwju+cAXTIDFpzCPW1g4vuUY+85:YZ88G8oEFzu6qwRVZ7ZT7985

Score

1^/10

Malware Config

Signatures

Files

TT COPY.r15.rar
.rar
TT COPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 707KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ