ItroublveTSC[.]v6[.]Fix[.]7[.]2(19)[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ItroublveTSC.v6.Fix.7.2(19).rar
Size

2.9MB
MD5

5ed148aaab124de3ffe03e782745aff1
SHA1

6d178a8c9382e9fbd89ba42ad1d88f16054339ab
SHA256

1c504aca28998aa78b3e138fed5632160ac589dea2ce5a6c4e8eafc9651c9b30
SHA512

2edd6f808ef2fe70413f0f477b07804949effb9ae55c059f5dedfda4eb3f4deed52ffb89c7a4dc3e911a4dec3f0a17cb545f8b0376158f2cd1e2212b2c232557
SSDEEP

49152:QYX6ONTUEXcqMQuw+tzvBM8StE4zIBhHKehtBjhSV+AGTXe8WwF8peibUkoD2FbH:QYKZEXbMQu/ttgt5z6VJTXe8WwqHe2Fj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ItroublveTSC.v6.Fix.7.2.exe

Files

ItroublveTSC.v6.Fix.7.2(19).rar
.rar
ItroublveTSC.v6.Fix.7.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

DW2;z{}
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ