TNT NOTIFICATION[.]exe | Triage

Sharing

General

Target

TNT NOTIFICATION.exe
Size

556KB
MD5

7314d58669991f12738f8fa7062ca1a3
SHA1

11f786d26f7ee51d886dcc10ba4fd3030d24503e
SHA256

7fa9edd3ab79772a7b8f195e813fb875ed7ebfdcae7865b442a1336e76200a63
SHA512

8016f8bd3839210a032a961d76be4ddd04eaee56901746b09b8478a7b17bb166a11db4753182433c6414497460e3cbe1887008dab121aacf3b924cebc88315b5
SSDEEP

12288:IrtPplTY6RhKusbqURc+AZuuXzV0IB86uKf8xH+:IrJTDEzZoJ0IBzPg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TNT NOTIFICATION.exe

Files

TNT NOTIFICATION.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 547KB - Virtual size: 546KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ