Static task
static1
Behavioral task
behavioral1
Sample
tSpritePadder.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
tSpritePadder.exe
Resource
win10v2004-20230915-en
General
-
Target
tSpritePadder_1.0.1.0.zip
-
Size
24KB
-
MD5
36e8e0017c962a9b49e3ef4e9b6bbf8c
-
SHA1
8c5e7fed10d504151cb53cce3c0ada39164513c9
-
SHA256
1b2d348f21199f8fda78896643797ad5dc6805dc5fe5ff7a5a865ef35caee9f3
-
SHA512
6884772fe04528c6f0e97aa59b0ba48e181e07fc66da1fbb370ccb8d0810f135b969b825b64c565ba4cfd5ccb9441d68ac02c6a5e1fc636e94ec3b6b2b10d00b
-
SSDEEP
384:AhMuUqplmAd79fCsX3BEx6c5cjH97u5+LlUmudj9VnJorDKPk4GSNxjErFagub:EJ6ARExNcRDUm2BVC3ikyNhAPub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/tSpritePadder.exe
Files
-
tSpritePadder_1.0.1.0.zip.zip
-
tSpritePadder.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
tSpritePadder.exe.config
-
tSpritePadder.pdb