Static task
static1
Behavioral task
behavioral1
Sample
TurtleSUSP-fe25b3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
TurtleSUSP-fe25b3.exe
Resource
win10v2004-20231222-en
General
-
Target
TurtleSUSP-fe25b3.exe
-
Size
63KB
-
MD5
258e70ec4ec8c01745517a859d0db338
-
SHA1
fe25b3d2790e39e3a437ec2635c3699ed47fa668
-
SHA256
04565dcb610a9ddb50ee7346ec2abb1db960077b6bf28ac89cc019c379299e76
-
SHA512
641b41416f727a82fba25aad42fe6bd7e733ceb723e2534b65e661a6195dc1704067d2778e391cdbc2e2c537f420cd18bf08b0226faf5d98a9b6c45d6a2ffc70
-
SSDEEP
768:4xfz8nfH6oeWqHzu0jQ5jOjyAHxbJHHpbs09nnU00NVPnnZ9gMw3MBVcMEpAtcFw:p/3KR3b9Hts09n8jPnZ9hw3vAtcw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TurtleSUSP-fe25b3.exe
Files
-
TurtleSUSP-fe25b3.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ