TS-240408-UF3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TS-240408-UF3.exe
Size

752KB
MD5

fca91dd543d14426dde0e3eb536b8abb
SHA1

a25eaeb1257204b1d50ece5107c5ff5fc2019b54
SHA256

de57f7ebb9dea951085ed8f7d09ee66d73daa8bdd4003867aaad20d68645fc7d
SHA512

958cda8aa3dd1011e18bf192de6ff46a7f563611ad60ea3bd64659a76b7f781c660325d26ff2188fd99f77355e7a3ce7c8c5dce612a8d54a7328f25799308c96
SSDEEP

12288:NMB1oVeonFUntH/dzoOYViwijhaBy3IdiTj6P2mfChqSB79vSijTUMXC/UmXceDY:Eo5FUN/1o9NkIdg6PpCoSzvBTUMXC+ek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TS-240408-UF3.exe

Files

TS-240408-UF3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

kIak.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 728KB - Virtual size: 726KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ