Static task
static1
Behavioral task
behavioral1
Sample
TT Aug 17.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
TT Aug 17.exe
Resource
win10v2004-20231222-en
General
-
Target
550f22c06c4c237fa9ce9a3804fe94f7
-
Size
461KB
-
MD5
550f22c06c4c237fa9ce9a3804fe94f7
-
SHA1
fe07818081bee26e0496d1e209c7378cdc674acc
-
SHA256
b04e66fb3a8c3554b258e1c1fcb50b744d489d27a486f37c02f03108b9e97116
-
SHA512
2408f12058094032a3a0da584769b06531382a2ea6ad5b1a1da86f8d72b0f6d374ee1f96c3da3ad040823ac3441098c8054357bf3492743e298f4cae0437e7b0
-
SSDEEP
12288:vgJeDQfszAoC7oq1d+mNC1WEvLGWJrVwEva:vgDszAbN1Am8vwb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TT Aug 17.exe
Files
-
550f22c06c4c237fa9ce9a3804fe94f7.rar
-
TT Aug 17.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ