Static task
static1
Behavioral task
behavioral1
Sample
TT copy Euro 4,375.52.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
TT copy Euro 4,375.52.exe
Resource
win10v2004-20230915-en
General
-
Target
TT copy Euro 4,375.52.exe
-
Size
638KB
-
MD5
1374cc321ed77722bd65b3381d1ac445
-
SHA1
2be79d67f28c01fa034ab988bd6ca7b4f398c2db
-
SHA256
3b2964662561ee6fba6b9519d180d568e29178ba7762ef18d74cdb0b6c0044c1
-
SHA512
0ee880728081f34b95f885baed7bfde03f47a98f0b19bfd0a72e55aff651177cc615433f1d7e2d3ccb4b5062a926179c2c17d9001a623f40d9717557c473839c
-
SSDEEP
12288:h0/jDaz7EVowhMWB9W/qFDrXujZZwRAQ1HlZ+4JLxl8F7:eLDM3x090GDqtZ61H6eL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TT copy Euro 4,375.52.exe
Files
-
TT copy Euro 4,375.52.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 617KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ