OralTIS Player[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OralTIS Player.exe
Size

48KB
MD5

4efe313b5ed0e2cd8f8b54522cc35980
SHA1

51512fc9539877effb954bb7c4e73342118e8b6a
SHA256

1e5b7e94cac8d5beab6a747a458ae78a75468e94cf669626fa89d52437702ca6
SHA512

18d3299d4377dc19a98dd7477089311105d96f7d269107e41065be14992149368ded84f67fbbcfd070c0ae91ad8634783ecb697b32c15afc5237dee92eb76b57
SSDEEP

768:G86Jn1rT8NtjhfQhrvvOx92Vx86Jn1rT8NtjhfQhrvv:H6JFQrj5QBX69u66JFQrj5QBX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OralTIS Player.exe

Files

OralTIS Player.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ