TS-240305-UF6[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TS-240305-UF6.exe
Size

15KB
MD5

f0988f267c494bed75319eaa9e6cc10e
SHA1

5ce86b680aab4ac2f76a627b64d5246d7a09285d
SHA256

93381f42dd897cd011ccca20d4c8dab0043cf25ea9861d01029cf896a5915869
SHA512

df4fbe2fbb6ff484821e717c41bd678c7c55f679a12d9445c1c0bb47554ceec873aedf1b18eeb1c435ab3d935a43c22d464ef5f20f33a1b4d6c9f8d12cac5241
SSDEEP

384:MGnhMXg4GZQhX6aQPikO77nC6rU3a/1M28OVz7+:9hMXge0aQPqxMQJ7+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TS-240305-UF6.exe

Files

TS-240305-UF6.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\test\source\repos\ConsoleApp2\ConsoleApp2\obj\Release\ConsoleApp2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ