TGX[.]exe | Triage

Resubmissions

03-06-2023 21:00

230603-ztkb2aae9t 8

03-06-2023 20:57

230603-zrv1raaa87 8

Sharing

General

Target

TGX.exe
Size

686KB
MD5

44a4e3d019880eab7d1cc7fe50400227
SHA1

c0e60962bf5dcd8d47bfa6aec07917a13fed86bf
SHA256

91ecd3092e58361a48a096d844f1846f5e6ca76b5091e9499ed3b4c3fbe28a3d
SHA512

622a6ad80c6b357e46e3428311584584d3329d69f46b7c44c31c1083f3fbe9e859da5259784600d5260dfa3ea836fbb02c80c8070e13ba7936d1b273c2c17e38
SSDEEP

12288:21IytQVxkI3A9VWcTkRe4n5yxmrKLR/mYbkDo44NTPqyiRr1JY1ay7nmGQ6:EZqJyxmrKLVmYdqr1Swy7ni6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TGX.exe

Files

TGX.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 677KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ