nTFDG098700080000800[.]UUE | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nTFDG098700080000800.UUE
Size

861KB
MD5

751aabd83fe0f641e05c18f60e870f75
SHA1

fd0dacbc1249a26b60261ceb6d6a07cfdcc62ddf
SHA256

d017d075c61c4f1a09012c131ab524ea834426c8698b00372b38cf5daaee6640
SHA512

fb0769df4d4120a448d304570a7389213412e20df3d95d6b656466667f3f8fdd52235a1920dd43c023cb6cd78e20da78f0239e0f49a56f3a3160147096cf3f05
SSDEEP

24576:pS1ETs8lzFV4zsqk9TzjIJ6NJmEq21Vzcgt6mrRHZ:6EThRVqaTU66+zDt6mrR5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TFDG098700080000800.BAT

Files

nTFDG098700080000800.UUE
.zip
TFDG098700080000800.BAT
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

qwDq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 871KB - Virtual size: 870KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ