TurtleSUSP-0ee65a[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TurtleSUSP-0ee65a.exe
Size

5KB
MD5

6bfae27aaed3ac496240cc5df0a9cb40
SHA1

0ee65a378c7d1c5e92fb17c0f448f8f69c43b4e2
SHA256

b226760693e84aec02fb464106e2fcb29a27c801af3c9432f3ba2117f6504751
SHA512

c8f7f1f4b00298cb7f9a3304197a0f99bebb2f56eebe14cd2347eaeab87acf4a02092ede0f8b5adbb6c239535a4efc60f4988a65b056b240e8c588ac76a94333
SSDEEP

48:anuyIO0iHO8qCTX43f68S4zyNzdNzANz7NzJSf68SOBR+eYJ:quyIiHOduX4bS4g/mNESOOR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TurtleSUSP-0ee65a.exe

Files

TurtleSUSP-0ee65a.exe
.exe windows:5 windows x86 arch:x86

ed0839e5ba76c4949fdf77063c88afd6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
SetThreadPriority
CloseHandle
ExitProcess

user32

MessageBoxExW
GetDlgItem
TranslateMessage
CreateDialogParamA
GetMessageA
DispatchMessageA

ws2_32

setsockopt
recv
socket
gethostbyname
connect
WSAStartup
send
closesocket

msvcrt

_beginthreadex
sprintf

Sections

.text
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ