TS-240514-UF3[.]7z | Triage

Sharing

General

Target

TS-240514-UF3.7z
Size

683KB
MD5

685e4b3952036b6ef92d95e51080afe8
SHA1

d192e1a9e2a6cf2dccd95882da2cbe3fd0197de1
SHA256

eb20a143eadc0c51e30e385b4a5b5ff9373df892d014d99921f8f8772e23c195
SHA512

8240d75549c698983b874ef261368300b06370f94b829748be0326e9a2d90902427f3be0b3b7c1f117132396ed4c555bd6c12cc03be62c737b7e8fe775893de8
SSDEEP

12288:/5QBlLShnB2huemVFvrdXNG5CD/Bs38TRldgUJRPZcba4PLZTWY1KcCCIzkeWAp5:hcmHzhNmGBs3eldgUJRehTn1OzkbAJL1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TS-240514-UF3.exe

Files

TS-240514-UF3.7z
.7z

Password: infected
TS-240514-UF3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ