TL_ALL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TL_ALL.exe
Size

34.1MB
MD5

979921694f2f6806fa64d0ae7c5a724c
SHA1

6935e3aa73b15ef1237d09ce346544b547487737
SHA256

cd10ee5cceb57605af93536990de8fe8fa4f39f88e3d808488a81a0704860574
SHA512

71424950fa840af1784d5441ade740f04053920d488d0c95404e65a2a3babe557211dec5e49a471baf7d04a7235e2469a1f9ba4f98ba161fb3c21a42f499090a
SSDEEP

786432:H7aeGc7L5EFrtIbXgw/Cr+6fj+EOOYDEXINcZ+SkRDUnKK+:H7jL5EQbXK+6fj+YXIeZzk1Unq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TL_ALL.exe

Files

TL_ALL.exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33.8MB - Virtual size: 33.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ