Static task
static1
Behavioral task
behavioral1
Sample
2023-05-26_bfd275385956981630362762f9d5d759_teslacrypt.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-05-26_bfd275385956981630362762f9d5d759_teslacrypt.exe
Resource
win10v2004-20230220-en
General
-
Target
2023-05-26_bfd275385956981630362762f9d5d759_teslacrypt
-
Size
1.1MB
-
MD5
bfd275385956981630362762f9d5d759
-
SHA1
70a465dcda942e5aa34bcb8df4c043b4ecb81e49
-
SHA256
9f4bb0cb90a71739cce50c72d16ad0a9d7a6e8a3e03bd2cd514617f58ca8d125
-
SHA512
7309f337341987aa7ff65085dacc45d1e2aa9b1c3f2d3cc34aef6ef63268be087d0be237355f2d92324a7cd2ccbb03e7c1808be52df8a2215e8fcb11e2f2c43d
-
SSDEEP
6144:k+GbcUbRCVHCOoKvsDoh10UBo9Anm1lMiaxR:k+GbjRMhvs610UBo9Anmf2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-05-26_bfd275385956981630362762f9d5d759_teslacrypt
Files
-
2023-05-26_bfd275385956981630362762f9d5d759_teslacrypt.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 635KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ