TS-240318-UF7[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TS-240318-UF7.exe
Size

5.0MB
MD5

07a529760b711dd0c84e3811c647ee3b
SHA1

e16d7b65084a79d97e9530aced9dcd72854326dc
SHA256

881564b52711e825dac9b6385c0753ed79e6c3bd2c6a32c2e413699a6f603c58
SHA512

f964ac2dd418fe28ad7c38af598b79eb9c6ff495f265caeace8309f5c1843031323488084d154f5a44bd313bc32f073260731820a4f9b1ef9985ccca1136530d
SSDEEP

192:RlZnbG/RZhROVrYBe4TwqM7IW4gpP9fpL:XZnb8fhAVcBDDSIip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TS-240318-UF7.exe

Files

TS-240318-UF7.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\0x0\source\repos\cheat\cheat\obj\Release\cheat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ