TS-240408-UF1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TS-240408-UF1.exe
Size

740KB
MD5

2ef1107f50be9a132702b7e6226d6e1b
SHA1

a2a5aba5afa237990445fc23c2858c0fa439ad9d
SHA256

32f07b2d9630359663c33d379b898422d51f1e4e1f50a55a1352a8c87f3290d2
SHA512

2d41e67f2a671ceef2f0491569368b41f0a1713d25d711bc954aa1f5eea3c21297ca0afcf100e59ac6c63b214c464b3b6dfb476c749efe57e7c4f88200b32138
SSDEEP

12288:wB1oVeonDkhJY4GKC3JZj9BPpe1P5KHliLgU0j/YEwxCB2oE9qZA30R+/wIgrXj1:io5+NeZjReJ4H5HD0xS2oEwZA36Ig3Qi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TS-240408-UF1.exe

Files

TS-240408-UF1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

qLxW.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 716KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ