9c40f6d08a13cb9e46e830e2d99152649363716f7558a211cfd8f8418da1b240 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c40f6d08a13cb9e46e830e2d99152649363716f7558a211cfd8f8418da1b240
Size

487KB
MD5

9abbdf57f5af65b41e094deb329afaf2
SHA1

545e249af3492b25bfb59ffe1435c8604eb9f71e
SHA256

9c40f6d08a13cb9e46e830e2d99152649363716f7558a211cfd8f8418da1b240
SHA512

f009bd579c01074d86b55a774d395f4995ee7b6c23f8db61f4ad13281c8e3197f13a6baf4717644e5937b017ad87ba18abd15c561cb44e6071a2138e8f845274
SSDEEP

6144:mL8sQzcU0ROfm+fFPmlFDpGwwXJ0sZIjHSW0kUam2Je2QftB0ibZ7IqpTzoCFrB8:4Q6Oe+fFq9wZid0/we2QffpNUYhrOqy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TT $45,000.00.exe

Files

9c40f6d08a13cb9e46e830e2d99152649363716f7558a211cfd8f8418da1b240
.zip
TT $45,000.00.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ