Static task
static1
Behavioral task
behavioral1
Sample
2024_NEW_YEAR_ORDER.scr
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2024_NEW_YEAR_ORDER.scr
Resource
win10v2004-20231201-en
Behavioral task
behavioral3
Sample
TNK-GROUP_OPERATION_LICENSE.scr
Resource
win7-20231130-en
Behavioral task
behavioral4
Sample
TNK-GROUP_OPERATION_LICENSE.scr
Resource
win10v2004-20231130-en
General
-
Target
c4691efb7f5f0bc6910fdc46d0770a16687f735bad8c6ce0a724cf4dd50adbd8
-
Size
1.9MB
-
MD5
e583d312a7a2cea9ad6dde2eecb046f0
-
SHA1
421e183844b4539486b239c77e62256cfb0ceaba
-
SHA256
c4691efb7f5f0bc6910fdc46d0770a16687f735bad8c6ce0a724cf4dd50adbd8
-
SHA512
d25ea8e4cc556770cfda580d1ec80ab34478b0be1b00466b6476a0e318fd6912d2d8ac671bb02d969cf8954886737c8437bccee0c2d687deb92d4e5f65222f4e
-
SSDEEP
49152:WCGn1LUPmAsW/cx0XlpCGn1LUPmAsW/cx0Xli:o1LUusaylb1LUusayli
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/2024_NEW_YEAR_ORDER.SCR unpack001/TNK-GROUP_OPERATION_LICENSE.SCR
Files
-
c4691efb7f5f0bc6910fdc46d0770a16687f735bad8c6ce0a724cf4dd50adbd8.zip
-
2024_NEW_YEAR_ORDER.SCR.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 889KB - Virtual size: 889KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
TNK-GROUP_OPERATION_LICENSE.SCR.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 889KB - Virtual size: 889KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ