tstreds[.]gagg | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tstreds.gagg
Size

4.3MB
MD5

4749b90940cc4dc8bdc97ae53289d294
SHA1

5ec07a83c70d4b199d61653bec84ee0dae68dc2f
SHA256

71fdec939897ca32d8f1319e8b700da4ff9f4b968fb66bb09aeb0df98c9f4019
SHA512

c6c6cd8c1d3e55e90fea7db327771eda655f3b6e600e50d763753fae5b1ae7428ccbbe97ab0348bfaa3b977a1763dc481392149a85bdceaead751a6cf0baba37
SSDEEP

98304:h7IEbWrAZaWnH0E0oinWVCro1Ot1BcRx3Nnz/JK3D1fCQKYP97XN60MCB8TmI02e:pKUYSdsy8OdPVFXtF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tstreds.gagg

Files

tstreds.gagg
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

./in
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.&+t
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ