TT Application Copy[.]zip | Triage

Sharing

General

Target

TT Application Copy.zip
Size

616KB
MD5

10a43f59f95ef5b3cdc295ed161ed8ef
SHA1

7146f98cf76149d510a9cc17a939c324a92da4ac
SHA256

86baf50543e3035e4dcb24889d77c19f81ee6d8f42e0b46bb9de639fb8d98280
SHA512

3f9ece777c15d976a3ba1e881ad656b6128f3a612359621b5b8dfc02c4f058f1fd7ea6a9b255a5a4bccb4d007d71b861802c75d1da9f8b692a02273fe85af9b5
SSDEEP

12288:47euSiUDNqxkDE5JeRA6gtZcSDX7IhOwo+pBSTUyLS6sVzyto4uKFcO:479UDNqxkDiJKAx8S77IhOwoYKUyLStc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TT Application Copy.exe

Files

TT Application Copy.zip
.zip
TT Application Copy.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ