Static task
static1
Behavioral task
behavioral1
Sample
TeraBonus.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
TeraBonus.exe
Resource
win10v2004-20240802-en
General
-
Target
TeraBonus.exe
-
Size
221KB
-
MD5
1c09031ff6c99052c26361fce47745fd
-
SHA1
f2d799b7fddee23549baf33e646092b6439af0c6
-
SHA256
cee4c3c0e2133c38190b9cdc15e75b2e79b120750602f82cb4423c395e0ef392
-
SHA512
f801d47ed6c5daf23ee1f29192bf2ad04b7b619b17e4a7094ad612562645a88f762f1ebd6c029d38052e7d2049dc9b32f4bbe9202837f191ba8d575ccb55af2a
-
SSDEEP
6144:7YfN1XjSrBV4kTqSrZkGAmPt9gt4C8OxKMcvObmbNQ3DHAgCv/:7YfNxSltTqBGAmPt9gt4C8OoMcvObmbR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TeraBonus.exe
Files
-
TeraBonus.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
-C$=) Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ