Static task
static1
Behavioral task
behavioral1
Sample
teklif_ZP026114__TS210 TRTRP2 % Vat DIP No2561 PB 34870 .exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
teklif_ZP026114__TS210 TRTRP2 % Vat DIP No2561 PB 34870 .exe
Resource
win10v2004-20240226-en
General
-
Target
teklif_ZP026114__TS210 TRTRP2 % Vat DIP No2561 PB 34870 .exe
-
Size
618KB
-
MD5
6315d0b579eabe4b5e9ccfe1e4b5bfa6
-
SHA1
060e69c204dee28cfe8bc3d2a06fccb2f1b728d4
-
SHA256
590f27260d772e044dd8819c937658e02ab15050b3bf6cc3dd054c808ed3c201
-
SHA512
86d12f57443ae0901dd8e826fc28e0d7e49d02123cc497b4c2d770f2cedb38ee7afc5d69e8c2017849c76bc0e3f2534271de75ac33b3662556a1732cc6e25369
-
SSDEEP
12288:GEX/pL5qi3PqBbnZOPl3XaN+sWCmSBFAEApj:3XrFcol3+VVBKEAV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource teklif_ZP026114__TS210 TRTRP2 % Vat DIP No2561 PB 34870 .exe
Files
-
teklif_ZP026114__TS210 TRTRP2 % Vat DIP No2561 PB 34870 .exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 610KB - Virtual size: 609KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ