Static task
static1
Behavioral task
behavioral1
Sample
TT.gz.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
TT.gz.exe
Resource
win10v2004-20230703-en
General
-
Target
TT.gz.exe
-
Size
147KB
-
MD5
841bc4b28567bc672d71cd8a86318236
-
SHA1
80ff2c2f2e6a5fb63f9d067b158410549ce3a9fd
-
SHA256
477a2d13d980cac6ec09b09eda410ea674cb8aa69da8a1e6e2a80fcf3b290c9a
-
SHA512
35660c01c79abad13d99757c4854092b6e3f8f736b892a92f7b6cf0f50a608e4f966f032aeefc3403e4bbda98f604ec25efed1feb5f329fcdbb02fd4bc33b479
-
SSDEEP
3072:oxmMRd5YFofTo4dXqJYNebTdz8rlmMtcDdNM8x/8v:osMRX04dXgYNeixbtcRNMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TT.gz.exe
Files
-
TT.gz.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ