tiff[.]exe | Triage

Sharing

General

Target

tiff.exe
Size

56KB
MD5

ea6d8f79b7d5c6ae151ed2fbc30338d5
SHA1

bb73876d67ba35f29fc41477c1d6bed1992076c4
SHA256

b373992d0d597476e688c73cae85ebc31958e129fdcc88566eabe3b67138f304
SHA512

beb221119bf5a1098265ff9914b6de93e7e024eb6e758de9a2d688ae1fc0143f3c6ecd192c2f37fed3c5b9b77bf793902dd87dff153ad70bbd3f72a7bfed4783
SSDEEP

1536:cbiRUqsKtXMp2+2t+9F6AC52TNJxpg6qq2aKEKrWQ:cbjy8pjR9/pg6323DF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tiff.exe

Files

tiff.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ