TS-240328-UF3[.]exe | Triage

Sharing

General

Target

TS-240328-UF3.exe
Size

659KB
MD5

dcc3c8dc9a2f58509df9700d87ad0c85
SHA1

e7af3abd5d6a5914c7a75156d26210a928b3d5fd
SHA256

3f60ddb8805a1fcf7eb923f364dd1c8d73dfa74dd54f7896af0a52f8c870b1f9
SHA512

ced2631ead6123c9913e272ab8ead42162bd9bcc3aae458add132ab00762916b78b47eb7c29c00afbb2b8771c479d1cd21749b5ce1e316269be07365e66ce3d5
SSDEEP

12288:tC0YOwquZWZ19Os7mPROmIYUrYDw4aRWIJAMwqPCyRjYtUMpA64IInzudmP:sO7MWrUbPROmYYDlaRWagyR8pVInAm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

TS-240328-UF3.exe

Files

TS-240328-UF3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 652KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ