Static task
static1
Behavioral task
behavioral1
Sample
TGParser.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TGParser.exe
Resource
win10v2004-20240226-en
General
-
Target
TGParser.exe
-
Size
54KB
-
MD5
285c8c23e14e44224640894a42d57cc1
-
SHA1
0acf5e051331af0ab0eba4cfa7017a840a324030
-
SHA256
2a995b8c9f6a3ba346d6883fb2cc67f19de4d51c6567f8f7626e15aa3723680d
-
SHA512
2bc1afe45cbe0a10d6656808e7b1c19cf092fd1d32fa42f7d6496615aff399e789d357560251a8bd4c92c84493f23921a5b780f7f937c3f7411a594120832584
-
SSDEEP
384:Ycksi8ejbPzgZCrgQA1Wwppro195cPRDVG/sWJj0dUZC9UEszkvwKwq6uj0hxZiI:Yc/SdwpW195cJh85D5ILL6ILLqnx
Malware Config
Signatures
Files
-
TGParser.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
78:e4:93:4b:3f:32:60:93:4a:74:f4:7e:2e:d9:e4:6dCertificate
IssuerCN=DESKTOP-73TL8R6\\AlexanderNot Before21/04/2022, 10:23Not After21/04/2023, 16:23SubjectCN=DESKTOP-73TL8R6\\Alexander4c:b9:c4:6e:38:77:eb:cc:55:cb:27:9a:21:e7:25:1d:83:ee:f4:e6:5d:bc:8b:5e:60:e7:65:ba:a3:46:60:3cSigner
Actual PE Digest4c:b9:c4:6e:38:77:eb:cc:55:cb:27:9a:21:e7:25:1d:83:ee:f4:e6:5d:bc:8b:5e:60:e7:65:ba:a3:46:60:3cDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\work\tdata-parser-c-sharp\TGParser\obj\Release\TGParser.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ