Static task
static1
Behavioral task
behavioral1
Sample
2023-05-26_64e2f569e6354960284b38a239044760_teslacrypt.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-05-26_64e2f569e6354960284b38a239044760_teslacrypt.exe
Resource
win10v2004-20230220-en
General
-
Target
2023-05-26_64e2f569e6354960284b38a239044760_teslacrypt
-
Size
712KB
-
MD5
64e2f569e6354960284b38a239044760
-
SHA1
6d07425bf0cd3628bd77b163e1c6fb46e8a76272
-
SHA256
7b7518f35c87e68852abe067727ac3c6af86400d760af7ff47bc8e09bd41fe6b
-
SHA512
9a68d3145290058256650700aea619057d4a4dd060387371284a1ef57ec112235d74a46ca6c8e767f4af4dd482962135619bb05aadead5a078ae07770c37d51f
-
SSDEEP
6144:Lvm+WVYQrireYpQkz/R1VEXADC28gj7WnWmc4cZgHQze5BIamE:Lm+keeYpz7R2KSnWmVcRze
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-05-26_64e2f569e6354960284b38a239044760_teslacrypt
Files
-
2023-05-26_64e2f569e6354960284b38a239044760_teslacrypt.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ