Static task
static1
Behavioral task
behavioral1
Sample
2023-05-27_ca1e55cd57828e54ddbf24ebc9ca364a_teslacrypt.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-05-27_ca1e55cd57828e54ddbf24ebc9ca364a_teslacrypt.exe
Resource
win10v2004-20230220-en
General
-
Target
2023-05-27_ca1e55cd57828e54ddbf24ebc9ca364a_teslacrypt
-
Size
732KB
-
MD5
ca1e55cd57828e54ddbf24ebc9ca364a
-
SHA1
2770e353ee16048856e24894339e7851848ae523
-
SHA256
c21a9cd914a3386a2b1426d44bd9e1dce45fd584a43d317085f7ac8ebf001896
-
SHA512
a848299b690aa7445b1890efe00de2ba5095625930ca5e29e8fb2479700641d9a3c103fe52862c864b58bbc2a00320a725a38d86e77636ebec4398984a6f0951
-
SSDEEP
12288:oFLOcIuZS79No3iWBnAXSiJ7/EyyANDFIUf:oJOcI3Wir78yySDSe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-05-27_ca1e55cd57828e54ddbf24ebc9ca364a_teslacrypt
Files
-
2023-05-27_ca1e55cd57828e54ddbf24ebc9ca364a_teslacrypt.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ