Static task
static1
Behavioral task
behavioral1
Sample
2023-05-26_69a497e78ac97d1d010d318ebecce869_teslacrypt.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-05-26_69a497e78ac97d1d010d318ebecce869_teslacrypt.exe
Resource
win10v2004-20230220-en
General
-
Target
2023-05-26_69a497e78ac97d1d010d318ebecce869_teslacrypt
-
Size
532KB
-
MD5
69a497e78ac97d1d010d318ebecce869
-
SHA1
fc7f66fac0f0fbc31318ede991522b922263c969
-
SHA256
28d2f54be25ffb1d89f16a8e8f99758eb1fa18e9349dee25b2452975bfbff2f6
-
SHA512
03954aa141de77d02b0ac3381b98d729a1b232dabb0b440591db62153b9c13fb6567201404a15d792facc1f1112887e5ece2577549e8c06da6c3ce48365a15af
-
SSDEEP
3072:zVKS4guAGY2j4mkQ/zxHtnZrBLXOjlukMwrkkyZaAZPZGId+fF8aAsTRpAef:lqLBWukMwVyZNuId+fFHdXAY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-05-26_69a497e78ac97d1d010d318ebecce869_teslacrypt
Files
-
2023-05-26_69a497e78ac97d1d010d318ebecce869_teslacrypt.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ