2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear | Triage

Sharing

General

Target

2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear
Size

408KB
MD5

958af5947aa2f49faef7910fd2b1bd4a
SHA1

beb05cef681c9c697081ec105ec811e3c3245a72
SHA256

bca3c25a89e418ed29cf91c44140814bce0efd2d0f3ce5a7be8370842d855de8
SHA512

c97d52aab27a134fca1b37cc5edd6ef0eef9e1389eda5dabc4bf9ffbcede075707e34cd411dbf24327d0178a939b05c136e17636966eee2d67c12a6ed377d1e7
SSDEEP

6144:hRmyXGDbGHvNfF3MNsnM+lDAAPRmyXGDbGHvNfF3MNsn:hEyMaP9F397dAAPEyMaP9F39

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear

Files

2024-05-29_958af5947aa2f49faef7910fd2b1bd4a_hiddentear
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\sk13_kgs\Desktop\랜섬웨어 빌드용 코드\hidden-tear\hidden-tear\obj\Debug\hidden-tear.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ