Static task
static1
Behavioral task
behavioral1
Sample
TLS.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
TLS.exe
Resource
win10v2004-20240221-en
General
-
Target
TLS.exe
-
Size
13.0MB
-
MD5
e022965f323bbec53d4a30b70f8a33bb
-
SHA1
d7d5cb84fcfa9c6b05efd773b575adedb8b36bce
-
SHA256
52770715593c5db4b394fccd402adf5cb0b196140abf2dd326510f433ba82978
-
SHA512
b05b962080424423f37e7d44d8c8dbafa21303eeac6668f5374d8d42458f9ea3a18de23b8284926e94776d2545d1ae9d99b9a80a3f9cf4f8b9d6ab500856b74a
-
SSDEEP
49152:yruA2JHMIqAzX89KLVF5AAbYA2LO9Ugfz9kwai6d09XfEvyQbIZVq5kTKn1TRENo:yrH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TLS.exe
Files
-
TLS.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ