Behavioral task
behavioral1
Sample
TCP.exe
Resource
win10-20230220-en
0 signatures
120 seconds
General
-
Target
TCP.exe
-
Size
35.7MB
-
MD5
77fa0da6857fb0b846a3ded42e4e66f3
-
SHA1
86067e23bc640d2497a2090d60ff417c6521c254
-
SHA256
72f63ca45946c97159249adfeebb4039a8091726a5235247cba36932b16ed323
-
SHA512
ad40c6b0a48608403b3cb8b4f428b4021c4697f69aae590b7ebdc7543f39d9938da6dc62d7cf1801b7e8615fc21bfe6c834ebac5053518435e1d7d38ded836c6
-
SSDEEP
786432:ix2uQa7CEDdKZZkP8PYemiyB0YR/AZiyB0YR/A:k17CagYemiXYuZiXYu
Score
3/10
Malware Config
Signatures
-
Detects Pyinstaller 1 IoCs
resource yara_rule sample pyinstaller -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TCP.exe
Files
-
TCP.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35.7MB - Virtual size: 35.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ