TBXX_Flash_Tool[.]exe

General

Target
TBXX_Flash_Tool.exe
Size 27.9MB
Sample260720-qse69adz21
SHA256 a16dffe4f3ff0e85b8a14cba0388df71a84c19721bd18e4fadc44c216bc4c5a9
MD5 d8e1b8e88e01ed45141bab8ac9ce13af
SHA1 358b4e3e7f18ee54dface83db2c9fa1637b5fd86
SHA512 8440bfb6acd923df9776820039150c78a6fa5865db4ea60a322dede573cfe9b646d770b8eb989741606849e3beae357c2a249eaa392bf1bd7055f3fa45e2d401
SSDEEP 786432:eEMALRzMQBtLdUAqGNpfu2uSc4uWGlso5EYWCMqOI1V:B9zzBtLd5VpW2uSc4uZd5EE/
TLSH
T1F95733BCE6928436D120453189E0E7F1801D7CE1FB3BD90BD6397FA12A7BB85632526D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
sample	pyinstaller

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TBXX_Flash_Tool.exe

File Explorer

TBXX_Flash_Tool.exe

.exe 27.9MB
TBXX_Flash_Tool.pyc

8KB

TBXX_Flash_Tool.exe

IMPHASH e72c3bfcbb77a361abf35cfdb2b95db2
SHA256 a16dffe4f3ff0e85b8a14cba0388df71a84c19721bd18e4fadc44c216bc4c5a9
MD5 d8e1b8e88e01ed45141bab8ac9ce13af
SHA1 358b4e3e7f18ee54dface83db2c9fa1637b5fd86
SHA512 8440bfb6acd923df9776820039150c78a6fa5865db4ea60a322dede573cfe9b646d770b8eb989741606849e3beae357c2a249eaa392bf1bd7055f3fa45e2d401
SSDEEP 786432:eEMALRzMQBtLdUAqGNpfu2uSc4uWGlso5EYWCMqOI1V:B9zzBtLd5VpW2uSc4uZd5EE/
TLSH
T1F95733BCE6928436D120453189E0E7F1801D7CE1FB3BD90BD6397FA12A7BB85632526D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Detects Pyinstaller

pyinstaller
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

31955

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

MessageBoxW MessageBoxA

kernel32

GetLastError SetDllDirectoryW GetModuleFileNameW GetProcAddress GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW DecodePointer Sleep GetExitCodeProcess CreateProcessW GetStartupInfoW LoadLibraryExW CreateDirectoryW GetShortPathNameW FormatMessageW LoadLibraryA MultiByteToWideChar WideCharToMultiByte WaitForSingleObject CloseHandle SetEndOfFile HeapReAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetCommandLineA ReadFile CreateFileW GetDriveTypeW GetFileType RaiseException PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetFullPathNameW GetFullPathNameA RemoveDirectoryW FindClose FindFirstFileExW FindNextFileW SetStdHandle SetConsoleCtrlHandler DeleteFileW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleCP CompareStringW LCMapStringW GetCurrentDirectoryW FlushFileBuffers SetEnvironmentVariableA GetFileAttributesExW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW GetProcessHeap WriteConsoleW GetTimeZoneInformation HeapSize

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW

ws2_32

ntohl

Sharing