TS-240221-UF2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TS-240221-UF2.exe
Size

1.1MB
MD5

fa5465ab3a46f4eccc534344969585a6
SHA1

3a9e7fcbb74b177435eef32e83ead5208684b602
SHA256

88af61cfa09312e162c42d8059c7893e244ff8cccf627650832d64360af6a692
SHA512

12d21e9fbe5bb812a902846e87ef9ee9b0dc6d13aad70ef819d12a2b8ecc914d263739b2700ba693f82616869a99a104826a4658ca8d0a2e839a3db15ee45db4
SSDEEP

24576:CEXvd+1mOAIcfyoXU1NScyFwjA6AVfDG2Z4:CEV3YbokboIsVfPZ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TS-240221-UF2.exe

Files

TS-240221-UF2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 883KB - Virtual size: 882KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ