Behavioral task
behavioral1
Sample
TickWGS2119R03.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TickWGS2119R03.exe
Resource
win10v2004-20230220-en
General
-
Target
TickWGS2119R03.exe
-
Size
375KB
-
MD5
00f8b0d4b30a53fa9a66f63eada153cc
-
SHA1
1be0a4ce0d5cfdddb9b2b5765fa5aab857d9ffb8
-
SHA256
b251532e94eedb86ea58d7c7dd11e31e5642167038ff9bcdb6c38bd2a78930a2
-
SHA512
575a6728f38440cb0f58979b680a5df71e88e2a7facc67a763319451cf1b33d918de76e69ec1757f74a0285dc9e2c220557a01f25ae1304439f84c28447b03bd
-
SSDEEP
6144:rw0wxmxWrKa9f6rQf+gXYEPRdC8Rn8BoqzeF0lAqILCnNinPHBCgKhKvUXGK5g2Z:vVq56rQf+TydC8R8MF0C7L5nPHBmhKs9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TickWGS2119R03.exe
Files
-
TickWGS2119R03.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE