tess[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tess.exe
Size

8.2MB
MD5

59f8268391bd45d00ba51c9afb7bf80b
SHA1

e721e796ccb2125e63b5e1d3732c03405ed4d25d
SHA256

142c7a176f0b0dd6cd3fa19c27a5d47a79cb57c7b41411430a9309ec2e50d93f
SHA512

e49bd122480a72f7e986bdf33cd95d96b578925f65f993dfc8b9635747209c6e9ecbc6fbe9d263bd9b750623105079005473b50d54d20ad1fd517fff10331e83
SSDEEP

196608:YhTb9B0BPrDz4pxgZZPy5RmStgxb/z6FDiSJXqeUh4mT:2Tb9epDz4MZZ4RmxYDiScfhH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tess.exe

Files

tess.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ