TGMacro2.5.Portable.zip
- SHA256 e61066a58c1f85be113689476f607243a77323587a0bc4cf82a8fd6bf2f2b9ad
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TGMacro2.5.Portable.zip
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
TGMacro2.5.Portable.zip
Resource
win10v2004-20240730-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Libs/CSInputs.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Libs/CSInputs.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
TGMacro.exe
Resource
win7-20240704-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral6
Sample
TGMacro.exe
Resource
win10v2004-20240730-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target TGMacro2.5.Portable.zip
- Size 288KB
- Sample240802-nascrazhmc
- SHA256 e61066a58c1f85be113689476f607243a77323587a0bc4cf82a8fd6bf2f2b9ad
- MD5 422233e3075d32cf7165b39797ff485a
- SHA1 126c626b31fa00b6c3472f8c4ffa7bc284f2654e
- SHA512 716810aa556a66580e3440ffd592902ddf6de5af8ec3ffb127ce4f54cb3c6336b47eaae36147b718bcf3a76d0fb167d76ba57c74347e5d41c28f8ff6e39e3b16
- SSDEEP 6144:D/UBJ9gKSnfKX2q/XY4YE0bwiyEB89W1cz8MHkTZPct/peSfkSXtF:4v9sfKXB/XY4YE0bwiyEruHictvJXf
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Libs/CSInputs.dll unpack001/TGMacro.exe
File Explorer
-
TGMacro2.5.Portable.zip.zip 288KB
-
Libs/CSInputs.dll.dll 19KB
-
TGMacro.exe.exe 1.1MB
Libs/CSInputs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 578890b3ed5ded5a90ea753b156396de530cceabbe4b0f0be5e351dc19ca0ade
- MD5 140fa390d3a2d33ff3aa2df267be64fa
- SHA1 fd58e7d73fce75bd19b93f7ece4895ca0dced640
- SHA512 427736ea0ce3060e485f372041f0273c15a33d9d3f9ce60978353d51ab4c4e9d85297c0251ac1695eaa02f277f95b3f3be097f001c084ae31e2a088773e463a2
- SSDEEP 384:7+LlPHu4AknLjP+G9B7Rr55hNIXj67yrY+hpDsVeFhgafOM:6LFHu4z2Gjp55YaVuhg2n
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25946
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\tarik.saylan\Desktop\yeni\repos\CSInputs\obj\Debug\CSInputs.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
TGMacro.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7004a782e420da3203b8ac8ded5f734531f9f09441f94d12a4b042ac2d29cb94
- MD5 2368fd2a77dd36baee219dbb8a16ac22
- SHA1 2b0bae5e104cc3b38723a1fad8fde1ca8d7a6d45
- SHA512 798b9d007760688f785ef9cb4e907c662f45c39ce693d6bfd889b1467db79c6c2474afc855538b443206e73c8801afc5fec5e4ba05ba23d7986e2b8b1fed366f
- SSDEEP 6144:7QwOjoW4HfjzLHAf1M1vHEqW1LymFEymFEymFEymFEymFTymF8ymFYRM3GWOhymT:71OjsHfr81M1EDkssssjajRM3BOIO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1041334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\tarik.saylan\Desktop\yeni\repos\TGMacro\obj\Debug\TGMacro.pdb
mscoree
_CorExeMain
Name
.text
Size
1009KB
Virtual Size
1008KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
113KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ