2023-05-27_3e1e1300885bc259a8d881501b48b5d6_teslacrypt | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-05-27_3e1e1300885bc259a8d881501b48b5d6_teslacrypt
Size

596KB
MD5

3e1e1300885bc259a8d881501b48b5d6
SHA1

95db64751e65260f6ba9e78393759d07759efd0a
SHA256

fde9f04b90f3a1342558fda826d07eaecf6a9c72175ce863238dcf84f732406d
SHA512

7e963aefb3822168e88615d2b511b2ba9cd9f6c98931e8ef823f9251285d311c5187b547b97e72d84f339a21596bc5f3b440f3bf6782d5ffdf64250ad1dd80f5
SSDEEP

3072:dVKS4guAGY2j4mkQ/zxHtnZrBLXOjlukMwrkkyZaAZPZGId+fF13aAsTRpAE7IPZ:zqLBWukMwVyZNuId+fF1qdXAEW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-05-27_3e1e1300885bc259a8d881501b48b5d6_teslacrypt

Files

2023-05-27_3e1e1300885bc259a8d881501b48b5d6_teslacrypt
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ