Static task
static1
Behavioral task
behavioral1
Sample
TurtleSUSP-240110-27-Trickbot-dc70ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
TurtleSUSP-240110-27-Trickbot-dc70ee.exe
Resource
win10v2004-20231215-en
General
-
Target
TurtleSUSP-240110-27-Trickbot-dc70ee.exe
-
Size
1.0MB
-
MD5
f90b81a13e550353eb96a5525dc67e30
-
SHA1
dc70ee12a1023639a102180ac13b1dcf9d06d0da
-
SHA256
a2c3e501ae7d7f3ada39302dfa82937731a78ac95a585f803490b72474fa1592
-
SHA512
c9bb1a4b83b17a2d7701b718d05982ac5edd528a6aab34149a166e1eb53801cc91c466dfc0c018e08c4f930fda56f2c0c23bb095669c6c6161f64bbb9c726949
-
SSDEEP
24576:zzqxG2Z9mIhQvq8wd7NjVb65GsL9FO5/4Mp8W6:XMmSdbbUGsy/Jo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TurtleSUSP-240110-27-Trickbot-dc70ee.exe
Files
-
TurtleSUSP-240110-27-Trickbot-dc70ee.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ