TNT Original Invoice[.]exe | Triage

Sharing

General

Target

TNT Original Invoice.exe
Size

860KB
MD5

750f2cff77e731de35fd0894d5ef0e91
SHA1

8f5760e3d3f44e1b90d793de3666a24f66bdb6da
SHA256

bd9df3adf1e6c84fcab2206d63d2f02e3f1ce1b715c09459d21ff47c09cac2f8
SHA512

61de1f098f0b4d11a96bf7503a7bd4938d1d97b7afdfd6c9d93dcab04372810c557367e1c940d9b2ad9765f7195eaa2842b40bdd5871baeadfb2254badb1d66c
SSDEEP

12288:hyOV/OSNlLvtCEfdSM1RHBWa71fXMaZT0IOeMO5ws3kf/v55BE0uDvZiJbyUdmOh:hypilLvtC/MwO1ffZTJXesg3TytDmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TNT Original Invoice.exe

Files

TNT Original Invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 851KB - Virtual size: 851KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ