tt receipts[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tt receipts.zip
Size

532KB
MD5

7da58b75518dbbf2c41a951e85479c95
SHA1

836a0be843346936b2f9f2d95eaf9feb2db715ab
SHA256

5275b337b1a3de1ee99c202ab62b99561c67ee6d097d7e779e273ea8e89caa40
SHA512

a2e7febed688e2b4e74a9785c7ea255de3343f02e74569a238ba6f58cf04cd3489b2cf0a9768babbd519a70930ab0622e31d99febc0976c7273d17df307d360c
SSDEEP

12288:VI+TnenEmlTc4uT13vX86/l/1Fkd0tmTv8e:VfTnenEmlTctTCw/1FkdKe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/tt receipts.exe

Files

tt receipts.zip
.zip
tt receipts.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 949KB - Virtual size: 949KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ