2023-05-27_2e5884dde50cc3b5442ccdea5409eb1f_teslacrypt | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-05-27_2e5884dde50cc3b5442ccdea5409eb1f_teslacrypt
Size

536KB
MD5

2e5884dde50cc3b5442ccdea5409eb1f
SHA1

878ba2c22453fd93359e7ed47e0ab5be1d126a3f
SHA256

44c25a32b4ae5e0e768a0d0c3cfcde9b83a61abef4983ff9cc75bf1d3d270457
SHA512

e516197a88af0151fecf19dd98cb96625af20e7d0bd0d3ba48253d2a7a08e5e683eafd6f109cc98efd180bdeec84a00d960ddb8a64e427c0668260e4571cb9f9
SSDEEP

3072:9QhtgSlZAeKoNhb64VzKRJWpLXOe/TYUAkLTVlHA+zm+DgzpN2nr+rtnd9HTRpnr:QsxWp9TYUvhW0m+8zpN3zXnr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-05-27_2e5884dde50cc3b5442ccdea5409eb1f_teslacrypt

Files

2023-05-27_2e5884dde50cc3b5442ccdea5409eb1f_teslacrypt
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ