ycUJ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
TNT Original Invoice.scr
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
TNT Original Invoice.scr
Resource
win10v2004-20240419-en
General
-
Target
993a12eb263fac02f7279502d0968e6666a5e56af2b28e0ceb6e745eca91acba
-
Size
647KB
-
MD5
06c13d957c88127cda863e40698082a6
-
SHA1
c935c180e5f6fdfd613ad4b1093b45a566cf740d
-
SHA256
993a12eb263fac02f7279502d0968e6666a5e56af2b28e0ceb6e745eca91acba
-
SHA512
ec536480f366b622c2d65d82d116b397ab19b22cf4e8200c38fffadc55a6e3b8aa1891d5d8506051ac0ee86c4f049607cc8c5461dfb3f13a8917fed8e3fd1216
-
SSDEEP
12288:DF/d8oCZ787m2yUqVkQv77j6UB1/WJbOMTQO8A/wKfzCRR+9imiAZWO4iN6ZsNBl:Dsum24l+J1TQ0wUKIXNrBhNY5K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/TNT Original Invoice.scr
Files
-
993a12eb263fac02f7279502d0968e6666a5e56af2b28e0ceb6e745eca91acba.zip
-
TNT Original Invoice.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ