Static task
static1
Behavioral task
behavioral1
Sample
TT copy.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TT copy.exe
Resource
win10v2004-20230220-en
General
-
Target
TT copy.exe
-
Size
496KB
-
MD5
3c88ec32f8490263f19e861fca809d1a
-
SHA1
7d9e071bcb1463e935a52f4296423dd37a8b4115
-
SHA256
fc5ea1c67d2177ba18b4465551fd8e07c8b3c223443d17a364f2b7b3078aa189
-
SHA512
570b33d228f9eff84ca2534b83473589d888292e9beb0c1d947cce76b61b0526f79ffbf2fbb788b28641ae666497f7cefbd95b0d4cadfff752f417a4fa41ac52
-
SSDEEP
12288:Mn2iNXnjq6SEX0VqJQnOAZoN8dyhwzQ/nIKgQz1aX3:01J4IXAo+dyDIKgQzMH
Malware Config
Signatures
Files
-
TT copy.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 494KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ