Static task
static1
Behavioral task
behavioral1
Sample
TCSetup61.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
TCSetup61.exe
Resource
win10v2004-20231222-en
General
-
Target
447d899a2d288c4926ac194d200fef14.bin
-
Size
11.9MB
-
MD5
447d899a2d288c4926ac194d200fef14
-
SHA1
ee3e1d1eb07641d7995542cec48da65b9b442a76
-
SHA256
2d8753e7544bb6de9d2b7f1f157c7e35e20a7778ab76ea3df39ce43ee4e3c8f7
-
SHA512
a75469fab3ed3fd1cc0b2a079318804c5f3294dc48480f6a0a419cb45394dc325dc97ffd491d1fbb45b72bdd2759c1f776fd3b3d208ebd969c0b09f54cd7d6bc
-
SSDEEP
196608:tNcWrvdNo8ak8eaagJTrxtQ/G03YOZ1Sx9aHRTXnQzPh9zcGsArThn2d8PKqNljR:tKuvdOEA9taToO3RTXQ7h9AGj148ll79
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TCSetup61.exe
Files
-
447d899a2d288c4926ac194d200fef14.bin.rar
-
ReadMe.txt
-
TCSetup61.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 125KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.htm.html .js polyglot