TS-240314-UF4[.]exe | Triage

Sharing

General

Target

TS-240314-UF4.exe
Size

7KB
MD5

fe6f493e2ff4b81fdb78e8d12196085b
SHA1

4e32c9c24bdbdbc0310278200264ca478ba9265b
SHA256

99dc69f42e744ffe19444869bfde2b1c1bdeda4cb304c3de16c183cd8eedacab
SHA512

32dd533cd836c267379ac13ab786db305aa4fe67fd68d2f9f39ec92ec8decd43f24a85f33adbd7170f241a36814ac33a7b707f1258681389f83ed518c4f9c26c
SSDEEP

96:NIlM2ik2UCcIBEUjTdpXh/9zf4JE+VFVE1Sept918q/hjUszNt:NkmECzjTdpX55f4JpFVE1Sor8q/yW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TS-240314-UF4.exe

Files

TS-240314-UF4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Akash\source\repos\ShellRunn\ShellRunn\obj\Release\ShellRunn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ