TT application copy[.]exe | Triage

Sharing

General

Target

TT application copy.exe
Size

603KB
MD5

dda7e4b341b33adf67b9215c642ab9a3
SHA1

d5d2a4ca9cf25f3d8de44d30f317927f1d23bba2
SHA256

3eff8258ac6c696c721f2f69d9d233a026dfff9ffadeb7a7be42ae4abdae2aef
SHA512

9ccd783bc47399729ead2b3ff4aed3ba3d7ff4804583c443f9058419530af98ad4f2fc9af329b8425db40e288b5ff90fc0c814748768e9f2766ca516ce4506f8
SSDEEP

12288:km3+qtF766Nz5SQAkZbF5qtUhHHd57fubggC66zNOc:v3+866BnAkdF5qtUhdBfkgl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TT application copy.exe

Files

TT application copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 601KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ