Behavioral task
behavioral1
Sample
tp2k.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
tp2k.exe
Resource
win10v2004-20231222-en
General
-
Target
7b0eee0006dec6019f3ab93949de8dd3
-
Size
63KB
-
MD5
7b0eee0006dec6019f3ab93949de8dd3
-
SHA1
69c446709be5a6eead4eb2493656e5e4641facd6
-
SHA256
c7b5afe7cef95d548829583472de435f543038ca19784ea5170348fe0c7fe2c4
-
SHA512
3fc4c5ffb4c6f76d2b25eaac2276778dcb60c9409029f71b03d59554bc548c50ed4d62dee020bb0197980179bb292f759e52df134ea82c82bd26320751e47dbe
-
SSDEEP
1536:5i0rVt7L+x10AroDL1KZJQN/sJg+TCudZ4wkWcJcivO5YgAWm/D:TVt/WWLAZ+N/sg+TCeyRXWm/D
Malware Config
Signatures
-
resource yara_rule static1/unpack001/tp2k.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/tp2k.exe unpack002/out.upx
Files
-
7b0eee0006dec6019f3ab93949de8dd3.zip
-
info.txt
-
scene.org
-
tp2k.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ