Static task
static1
General
-
Target
TikTokRizz.zip
-
Size
1.3MB
-
MD5
f1eeb6f04658bc98d4e25f65960ccd93
-
SHA1
d802340e34df7e001e8a23bf5faee841cf865af5
-
SHA256
21c20732aa5d87200c0df10139a844ebd9c19ee6486fab3ba78a6ea92f968935
-
SHA512
7c6a5ba88f3c704fd4462cb5f2a303baeae76a72cfad9b9a2ccb7d4fe956c7a1d8a5279521c096e82325568915cfa4145a5e1efbf44c9b2f129a102128171014
-
SSDEEP
24576:IlXXlx93pi5U1ss39WXRaMPc9Nus+8ws9QIKTIopYOW8Hi1V:Il9ZiO15uaMEXhSs9HK0oVFC1V
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/TikTokRizz/TikTokRizz/bin/Debug/TikTokRizz.exe unpack001/TikTokRizz/TikTokRizz/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll unpack001/TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.exe
Files
-
TikTokRizz.zip.zip
-
TikTokRizz/.vs/TikTokRizz/FileContentIndex/0c4aa1fd-6b50-4cc5-8d96-ce9083219a23.vsidx
-
TikTokRizz/.vs/TikTokRizz/FileContentIndex/1038b269-7489-4412-8b9e-92cb85064898.vsidx
-
TikTokRizz/.vs/TikTokRizz/FileContentIndex/8819d140-dbb1-42f4-88e1-27502f877ffd.vsidx
-
TikTokRizz/.vs/TikTokRizz/FileContentIndex/c3774f1e-57c8-4ee9-999c-373f4e24a054.vsidx
-
TikTokRizz/.vs/TikTokRizz/v17/.suo
-
TikTokRizz/.vs/TikTokRizz/v17/DocumentLayout.json
-
TikTokRizz/TikTokRizz.sln
-
TikTokRizz/TikTokRizz/App.config
-
TikTokRizz/TikTokRizz/Form1.Designer.cs
-
TikTokRizz/TikTokRizz/Form1.cs
-
TikTokRizz/TikTokRizz/Form1.resx.vbs
-
TikTokRizz/TikTokRizz/Program.cs
-
TikTokRizz/TikTokRizz/Properties/AssemblyInfo.cs
-
TikTokRizz/TikTokRizz/Properties/Resources.Designer.cs.vbs
-
TikTokRizz/TikTokRizz/Properties/Resources.resx.vbs
-
TikTokRizz/TikTokRizz/Properties/Settings.Designer.cs
-
TikTokRizz/TikTokRizz/Properties/Settings.settings
-
TikTokRizz/TikTokRizz/Resources/TikTok-Logo-2016-now.png.png
-
TikTokRizz/TikTokRizz/Resources/tiktokrizz.jpg.jpg
-
TikTokRizz/TikTokRizz/TikTokRizz.csproj
-
TikTokRizz/TikTokRizz/bin/Debug/Guna.UI2.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:dbCertificate
IssuerCN=Sobatdata Root CANot Before23-10-2019 05:22Not After22-10-2025 17:00SubjectCN=Sobatdata Software0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29-03-2022 00:00Not After14-03-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
53:fe:48:3a:4e:3f:2b:3b:e3:71:7e:2b:07:d1:02:37:21:e1:7a:86Signer
Actual PE Digest53:fe:48:3a:4e:3f:2b:3b:e3:71:7e:2b:07:d1:02:37:21:e1:7a:86Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Guna.UI2.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
TikTokRizz/TikTokRizz/bin/Debug/TikTokRizz.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\chipp.DESKTOP-FI0GJD9\source\repos\TikTokRizz\TikTokRizz\obj\Debug\TikTokRizz.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
TikTokRizz/TikTokRizz/bin/Debug/TikTokRizz.exe.config
-
TikTokRizz/TikTokRizz/bin/Debug/TikTokRizz.pdb
-
TikTokRizz/TikTokRizz/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
-
TikTokRizz/TikTokRizz/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
TikTokRizz/TikTokRizz/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
TikTokRizz/TikTokRizz/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.Form1.resources
-
TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.Properties.Resources.resources
-
TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.csproj.AssemblyReference.cache
-
TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.csproj.CoreCompileInputs.cache
-
TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.csproj.FileListAbsolute.txt
-
TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.csproj.GenerateResource.cache
-
TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\chipp.DESKTOP-FI0GJD9\source\repos\TikTokRizz\TikTokRizz\obj\Debug\TikTokRizz.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
TikTokRizz/TikTokRizz/obj/Debug/TikTokRizz.pdb