Behavioral task
behavioral1
Sample
TiWorker_JC.exe
Resource
win7-20230831-en
General
-
Target
TiWorker_JC.exe
-
Size
106KB
-
MD5
392b3ca75007abee0ce15ac2fa9796c6
-
SHA1
2d29fc541faa9b0399e0bb928cc218c7f8feb09b
-
SHA256
d8b18dcbff853b2cf174b9b8f1b0934caafad0dd7158de7e9890eee6eff2377a
-
SHA512
c9d30c9f026e88f1dbedc78d75bb5d8a3b522a4ab2fe0cbaffab31a0a611fe6f220d16d38d9de13a9b5911930560e40f042b56fde3e56b6ddad1d8c09f6f9d3b
-
SSDEEP
3072:sr85CSl9zjaF9beYvM+sQ166DoN36tfQviFCBr0BnpfJ:k9c9z6vMlQYr6
Malware Config
Signatures
Files
-
TiWorker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 42KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ