2023-05-28_6773715f1f7676fce56a716eb95c4a0e_teslacrypt | Triage

Sharing

General

Target

2023-05-28_6773715f1f7676fce56a716eb95c4a0e_teslacrypt
Size

604KB
MD5

6773715f1f7676fce56a716eb95c4a0e
SHA1

5743ed3ec2447598779c00311801d2c98b7c4f30
SHA256

17e458b0ea3e97352bfea2a9a24caa02b1e36b440d02aa05a070c740c20e3804
SHA512

8015403eedefcb80c484a980c77d14b16a5d2546a502dfae0fe64f0e9d715242c490502f396e699f1582acd244ca8d16a54f96966b445850f86fa4de86ddeb70
SSDEEP

3072:1P36YQgDABWbDFp7yz5hwXZwnt+XOCGNjYQohl5ZieMhJP7p9Ge3ESTRpA9:VZyTntxVYQE5ehJP7p9N3EcXA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-05-28_6773715f1f7676fce56a716eb95c4a0e_teslacrypt

Files

2023-05-28_6773715f1f7676fce56a716eb95c4a0e_teslacrypt
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ