TIS_monitor[.]exe | Triage

Sharing

General

Target

TIS_monitor.exe
Size

228KB
MD5

4d7b78ff52c45726c607708ecccb3d43
SHA1

6ddc38c2b556921a17d63359c5ac98f9777a5675
SHA256

b48bfba688e862a32bf0c41ad1866f864d57812a01679a08248d379e89de78c2
SHA512

7ad8ae75b0ae6f3e15b2613a91b098afa97edabbee2eb0b83a707023943b101ae5d3d33a4edd995bb05dfa398bd4ca41733321b7304fea045ab9a0c61b51a20f
SSDEEP

3072:vq9RrQeNpnpwwwwrwwww0XxL4Meqznpwwwwrwwww0X+Lml:KRrQeRwwwwrwwwwGLFeOwwwwrwwww5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TIS_monitor.exe

Files

TIS_monitor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\TIS\電子帳務版\Tis_Park_Server_2021\TS_Monitor\TIS_monitor\obj\Debug\TIS_monitor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ