TT copy[.]exe | Triage

Sharing

General

Target

TT copy.exe
Size

17KB
MD5

b0b94bea5f13189ddb42fa498a1b7ee3
SHA1

598a56f174be27dc8f091ff9336ffe3105433a92
SHA256

bed3b4e33192ffae371831dfd9061f8e2aadb348b3f1dea0b51d29c29f5fed95
SHA512

6d1e5f970a50b1c1fa55215b05c3720c8658da69f807768302c2aa79587ef3bf7dd6a45228e939f3f9df8519f9cec7290eb82e83da09016d5a81cabb5f64aa95
SSDEEP

384:vxClkRaWmR17NVihnd8fcbuiDvoOdjk/QaqsFwG6:ZaP7NVCVWiG6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TT copy.exe

Files

TT copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ