tofsee | 1e0759a7af36bfba3a796eb406bc5509[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e0759a7af36bfba3a796eb406bc5509.bin
Size

3.1MB
MD5

1e0759a7af36bfba3a796eb406bc5509
SHA1

30ff9c2be828cb171397b6f276d5d1f8d4eaf36f
SHA256

531f89c67fcedb5a183cfd23ba518c25ea1e275b6e5adad09687139a6544f277
SHA512

f8bedeea75b5bfab53e77303cda8cf31c436d1bf9bf75a736a25b5cd25c9a46d73cc06a1a77117be9bf2df9ccb72c692dfe7fb57748b9467e13f416b1265ac92
SSDEEP

3072:6DVCyFxSYACXFppI0B42M2gbDNCbNCpvDi4xSpvSNY:6DVCynACXFppI0u2ENCpMu4xSZ

Score

10^/10

tofsee

Malware Config

Signatures

Tofsee family
tofsee

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e0759a7af36bfba3a796eb406bc5509.bin

Files

1e0759a7af36bfba3a796eb406bc5509.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ