2023-05-27_e8d1a56261d8bb8749b72060291b3d67_teslacrypt | Triage

Sharing

General

Target

2023-05-27_e8d1a56261d8bb8749b72060291b3d67_teslacrypt
Size

672KB
MD5

e8d1a56261d8bb8749b72060291b3d67
SHA1

a2289f953671c455a630973f9e147177b305c7ca
SHA256

09de967c71af76774ae674f85882f694b170dc55d0888c8abb37e8f05f0de9a0
SHA512

c2a61431fd9cfa8b461e4d72f2c869c56866840e4b7ceb6a527f1e306b8ff8d999775167283f11b1ccd57bb2e18e9cda5d22bdc4b2dde9469a0c7cf86262617a
SSDEEP

6144:zqLBWukMwVyZNuId+fFAdXAXKlb9qV8zLiyCN8Mjl48YN2:+LBkVqNuId2FAhJlb9ksLw+Rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-05-27_e8d1a56261d8bb8749b72060291b3d67_teslacrypt

Files

2023-05-27_e8d1a56261d8bb8749b72060291b3d67_teslacrypt
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ