scan[.]tt-pdf[.]iso | Triage

Sharing

General

Target

scan.tt-pdf.iso
Size

652KB
MD5

997e8ab5695a7baa154d17426abce9eb
SHA1

55a8884b50dcd007ce5e4a84c7b9ab13901574a2
SHA256

f2f85fa1743b7a06367166912a274cacfff5f43fb59b358ef5913e3dd5d7a0a9
SHA512

f05ca5aba7e8b2ef596762dc0a67a2a82b2eea906c09f1ae1260f7e3a0c2e51adf3a5422a783a44d026d5abb3d7908795b3247c9c1280fd35e7e5c8bc68c400f
SSDEEP

12288:rr4lrrr/zYPeL3bhmL8NnTl/EOnOzfAq3zStUunsB:rr4lXr/zieL3boQRlNn3q3ujns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/scan.tt-pdf/vgwR4TopGfezKSf.exe

Files

scan.tt-pdf.iso
.iso
scan.tt-pdf/vgwR4TopGfezKSf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ