Static task
static1
Behavioral task
behavioral1
Sample
TNT NOTIFICATION213596003.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TNT NOTIFICATION213596003.exe
Resource
win10v2004-20230220-en
General
-
Target
TNT NOTIFICATION213596003.exe.bin
-
Size
478KB
-
MD5
b6fce55e8bd0ae825447eecc5a191f1e
-
SHA1
87ab87da830486ef0135d20b569fd9edc2a0e6d1
-
SHA256
497f1767839d62e5bba3a33a89841eb2fcd196bd743014b6c5ede55d6a3eecd3
-
SHA512
ae329ba5993e67c897616d8b8e0b03584e720bb6fc16eb25b7d538ea11687a4866fe70787f4e32950286294f6eef928eb123d3078171001eef8732c97375b297
-
SSDEEP
12288:q3vaOpCOLFPMpqgTzygvs/tW0A8M9PeQi:q3vppC8F0pXT0W0S9P7i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TNT NOTIFICATION213596003.exe.bin
Files
-
TNT NOTIFICATION213596003.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 471KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ