42e854ecba18b548670312d9ab6c2e1b80c904c7c28b84300b32bd4aac8ebbdf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e854ecba18b548670312d9ab6c2e1b80c904c7c28b84300b32bd4aac8ebbdf
Size

194KB
MD5

26007d4e02660c97e14e04e59380c0b1
SHA1

be38b072c48841e3549bb05e2242d710c9ef6f49
SHA256

42e854ecba18b548670312d9ab6c2e1b80c904c7c28b84300b32bd4aac8ebbdf
SHA512

4916c0240bcf784d7cc61fbd09084c0369b2a1f10ffd805cb30b70f50704c7b25488c73edb1f0f727a071f03de9f3b433255e69dcc284df4ea40b4fee68d03c7
SSDEEP

3072:pywxNBrsrGNMqR4nlMxL/iS8zmxhc26xFHo86ppIs2gvZ4SNFzyU7CK:throAQny/Omx+SpIsNx4SN3X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ttslippymnt_01112023.exe

Files

42e854ecba18b548670312d9ab6c2e1b80c904c7c28b84300b32bd4aac8ebbdf
.rar
ttslippymnt_01112023.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ