twin-code-data-tools-beta.zip
- SHA256 bcf6c26feb881f038b8fa8addc18ce12d4974c0a667dfd6afed3acab099cdd33
Overview
overview
7Static
static
3TNTILT-Dat...w.xlsx
windows10-2004-x64
1TNTILT-Dat...w.xlsx
windows11-ltsc_2024-x64
1TNTILT-Dat...d.xlsx
windows10-2004-x64
1TNTILT-Dat...d.xlsx
windows11-ltsc_2024-x64
1TNTILT-Dat...s.xlsx
windows10-2004-x64
1TNTILT-Dat...s.xlsx
windows11-ltsc_2024-x64
1TNTILT-Dat...1.xlsx
windows10-2004-x64
1TNTILT-Dat...1.xlsx
windows11-ltsc_2024-x64
1TNTILT-Dat...ls.exe
windows10-2004-x64
7TNTILT-Dat...ls.exe
windows11-ltsc_2024-x64
7Behavioral task
behavioral1
Sample
TNTILT-Data-Tools-0.1.0-beta1\Demo\pricematch_new.xlsx
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
TNTILT-Data-Tools-0.1.0-beta1\Demo\pricematch_new.xlsx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
TNTILT-Data-Tools-0.1.0-beta1\Demo\pricematch_old.xlsx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
TNTILT-Data-Tools-0.1.0-beta1\Demo\pricematch_old.xlsx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
TNTILT-Data-Tools-0.1.0-beta1\Demo\safesheet_clients.xlsx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
TNTILT-Data-Tools-0.1.0-beta1\Demo\safesheet_clients.xlsx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral7
Sample
TNTILT-Data-Tools-0.1.0-beta1\Demo\tablemedic_clients_1.xlsx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
TNTILT-Data-Tools-0.1.0-beta1\Demo\tablemedic_clients_1.xlsx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
TNTILT-Data-Tools-0.1.0-beta1\TNTILT-Data-Tools.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
TNTILT-Data-Tools-0.1.0-beta1\TNTILT-Data-Tools.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target twin-code-data-tools-beta.zip
- Size 17.7MB
- Sample260721-271bhsvhnb
- SHA256 bcf6c26feb881f038b8fa8addc18ce12d4974c0a667dfd6afed3acab099cdd33
- MD5 6f26e0637102b0430342d4ee31793cf1
- SHA1 2cbc85ad451380948ff2c48721567d0dd0aacf62
- SHA512 e66477a6f3f1266ff6520d559641ac97b16ccc1205c98c813eebf44287cf0f0572b40c5cd25422a5914e192787a7012d69e2d9b56a4ff36278d1e5a2dcf9c26b
- SSDEEP 393216:taiFNMNo3gX8MDu0bZGrVCrEi94h7UjRXYonjfTMbd/OZDNyLNuEz/u3Yo:UiFNwvXhD1ZuVS94h7eRXYojfsd8DNyg
- TLSH T1B61733F49C8758E3B6940FA988A634B6E5ECFE120A42905E705382121D3A7F7FE4DD4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/TNTILT-Data-Tools-0.1.0-beta1\TNTILT-Data-Tools.exe pyinstaller - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TNTILT-Data-Tools-0.1.0-beta1\TNTILT-Data-Tools.exe
File Explorer
-
twin-code-data-tools-beta.zip.zip 17.7MB
-
TNTILT-Data-Tools-0.1.0-beta1\Demo\pricematch_new.xlsx.xlsx 5KB
-
TNTILT-Data-Tools-0.1.0-beta1\Demo\pricematch_old.xlsx.xlsx 5KB
-
TNTILT-Data-Tools-0.1.0-beta1\Demo\safesheet_clients.xlsx.xlsx 5KB
-
TNTILT-Data-Tools-0.1.0-beta1\Demo\tablemedic_clients_1.xlsx.xlsx 5KB
-
TNTILT-Data-Tools-0.1.0-beta1\Demo\tablemedic_clients_2.csv214B
-
TNTILT-Data-Tools-0.1.0-beta1\LICENSE.txt1KB
-
TNTILT-Data-Tools-0.1.0-beta1\QUICKSTART_RU.txt1KB
-
TNTILT-Data-Tools-0.1.0-beta1\TNTILT-Data-Tools.exe.exe 18.0MB
-
run_data_tools.pyc225B
TNTILT-Data-Tools-0.1.0-beta1\Demo\pricematch_new.xlsx
- SHA256 a2c6a3eef670f49b5bf212d26b8d6a3fd80084d38c8fd2ea3f98cbf31754e5a2
- MD5 90cfd2c366c9a54d1797c881b6d20d9a
- SHA1 1597578f5d8b0d34de657d90172a9b08af33f4d6
- SHA512 460d9c7d875ad7078a6733d0c9c5fec48d3c92d934d25822fc894385c88e248a9c20f173956398859f9bcbb95f4270576900f66a241813210a5a92bc2535aa56
- SSDEEP 96:CnsvlLUn0si6wAleemuGp7GAuj3O/ahYwF74hn1lnq1nwgpQyXft40JQ66uOiRCy:Est6PH3lquGZGjO/ahYJ14RdwPdPAdgg
- TLSH T1BAB15D99E90A583BD303AE39E1A517E0A14D34CB834B990759D172BE1AE36CC27431C9
- MD5 SHA1 SHA512 SSDEEP TLSH
TNTILT-Data-Tools-0.1.0-beta1\Demo\pricematch_old.xlsx
- SHA256 b3c421968a74dbec6ebbaf29d80c38332194d0f39ef9eb38ded7fd2a2ba1c685
- MD5 d2f8d021a938927c75e816d98ffb8d81
- SHA1 b81121807e292c8b373fbc2205c945a05de5bdc8
- SHA512 ccf9b6f4068f29955d4b6de1ee7d14c92443fd1524d26c2f332fdf64339966c41a8386e3387cf2bb31632e3f95fb41adebc5be335f6789bf8c8a5d7ce7167f1c
- SSDEEP 96:CnsvlLUn0si6wAleemuGp7GAuj3O/ahYwFIVqWerNh1nwgpQyXft40JQ66uOiRCE:Est6PH3lquGZGjO/ahYPUr5RdwPdPAdp
- TLSH T197B16CDD950D683AC203A839B0650BE0D24E34CEC34B960775E4B2ED5CE26993B570CE
- MD5 SHA1 SHA512 SSDEEP TLSH
TNTILT-Data-Tools-0.1.0-beta1\Demo\safesheet_clients.xlsx
- SHA256 a9530176308dd9d7cf2177a43202dcf34f2b742519f76ae80269f9222e6f0381
- MD5 c1cf5c13aac361573bc1535bcdd0d70b
- SHA1 3149eb75082257103d17e8a4e3280b5d37700e5a
- SHA512 5b669df5bf28b134dd2bf91841606f644d4d5590474b7fb58e38e274aad8aaa6f6ffdbf6f004e762cb2000a75c3c30caac921ee30fb71309452c4faff1d1c978
- SSDEEP 96:CnsvlLUn0si6wAleemuGp7GAuj3O/ahYwFcd7H7cwz1nwgpQyXft40IvLfAhB6u5:Est6PH3lquGZGjO/ahY3R79lRdSNdPA/
- TLSH T12EB16EEAF816683AD103553AA45416F0C14D3485D38AC903AAD1B1DE6AC37453F9F1CE
- MD5 SHA1 SHA512 SSDEEP TLSH
TNTILT-Data-Tools-0.1.0-beta1\Demo\tablemedic_clients_1.xlsx
- SHA256 ef85077cce6fe160a1a302b38fb72340d0c5ff9b144347733050e1e08f929121
- MD5 f1c9000b39eca6c5d8608d059dfaeca7
- SHA1 deec63e502be9707b1433f438fc600abce1ea641
- SHA512 e47cd431733614f761ad40d88523c1573855b304de0ae5cbc02c7e15b356fc1c00692bbd5d4c24898355d2be0342bab28505d93f13baeb7e176da6bdfdfb577b
- SSDEEP 96:CnsvlLUn0si6wAleemuGp7GAuj3O/ahYwFATrvJyRMJP1nwgpQyXft40aDxy96ui:Est6PH3lquGZGjO/ahYFEK5Rd+Q8dPAQ
- TLSH T176B14D9EF915A43BE2026E3DA4811BE0D14D308AC387C643ADD5B1EE99D22893F570DA
- MD5 SHA1 SHA512 SSDEEP TLSH
TNTILT-Data-Tools-0.1.0-beta1\Demo\tablemedic_clients_2.csv
- SHA256 02ab293c4ae6658b9705cef88e8a4cf1d28c53ec2a2c4776b39b38a4fe91849b
- MD5 e55e6fac366ef81302dbef1eb2bcdef2
- SHA1 235b915c39868993ae8d31a96896f219ddf6aab9
- SHA512 069d9f86b04ce8ef8e91e485416cf89fd17e922c19e22380f2d1b03dc9502d658a7793840cba1ecc22112adcbf8718c494b6d2d7b08a3fb29171df1e80c1a7f7
- TLSH T1FDD0A751700B28462216305F4A00BE187854353C6E694200A6200E0C50FD814D6B928B
- MD5 SHA1 SHA512 TLSH
TNTILT-Data-Tools-0.1.0-beta1\LICENSE.txt
- SHA256 c43ee6753115f377c5a4a57b78239a1da20d7ed31179351f7f9c8a687f046813
- MD5 46717c86029d70a8334bc6759dc12d55
- SHA1 c314cd459dfca405ca709dfef0362c7e900ee893
- SHA512 f221fc8d270668ddb3e31dccdf4b078ccee53b513eca3f0d008d0384590ff76bc0cac65bb5d198ee20bc63b99a30c4a6ecbce38eb68616c4920bbf4ee897ef75
- TLSH T1A731D1A052AD549E1211F41BD804AE0E7DEB00FE3FA7572A15683D6F31E3074C73AA59
- MD5 SHA1 SHA512 TLSH
TNTILT-Data-Tools-0.1.0-beta1\QUICKSTART_RU.txt
- SHA256 1a536bb0e6e401720f4a72d04bdd123c298e1d6bd16a2c35eedc796769e23561
- MD5 100b96a2baab0aa5e2e5d2aaa101e995
- SHA1 ee0faa8af380c20c2f3a8e792bd9066be6a62cf7
- SHA512 a81c74a2243c900b1f849497bb44a0caffeb03da1cfa2de22d08c578019b5327a394be8cce624b521141d7ea380451c196e1abce7c0849656ca4279088058f64
- TLSH T14831A85045AE54C91209E05BDD00BF8E7CEA18FE3F6F632619642DBF34F3278C929589
- MD5 SHA1 SHA512 TLSH
TNTILT-Data-Tools-0.1.0-beta1\TNTILT-Data-Tools.exe
- IMPHASH cf72283be50852e418ce6bbb6b645835
- SHA256 8ef291990af10dff84ac07a54d3a4721cd15ee04e49e6deba3d494fe04418300
- MD5 bda66403f97b04a20305447215cb734e
- SHA1 00143680534224751bd5a3b2d1a051178065ea65
- SHA512 5fbd2d7a4a4558504b745f419f55062dae7c34884041e08d6b21fde54931123ebee21ddf0dd35225e8509a6bffd90c0fc870cffd0fb70ddcfb2d881f356e90ed
- SSDEEP 393216:W4pLRolGjcOoqy5Xd/+z9H7oW8A8nGCnGjRi2bjRo4NeVHxFJEF3OkYLAX:DpLRvjXoRldWzVoW8A8nGCnkRi2nRDeS
- TLSH T1BE1733D4BEC108D5E497563988D66532E2E5FA6207A0C0DF2BF24D120E732E5FE38B25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
57632
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetSystemMetrics
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
GetCurrentDirectoryW
HeapAlloc
GetFileSizeEx
GetConsoleOutputCP
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
GetModuleFileNameW
GetEnvironmentStringsW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
SetFilePointerEx
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
SetDllDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
RtlUnwindEx
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
GetConsoleMode
ReadConsoleW
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=183, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35721,
count=9, id=259, version=35721,
count=17, id=260, version=35721,
count=39, id=261, version=35721,
count=11, id=257, version=33145,
count=158, id=1, productName=Unmarked objects,
count=29, id=260, version=36246,
count=1, id=258, version=36246,
run_data_tools.pyc
- SHA256 e6fd2487cad461036c9c40ae728a2abbad92dcf1749bb0d58af7cc6d7617f499
- MD5 ca7483e6f0dbe366eac90f82a681ec89
- SHA1 b08f40e4e61215f5b3ab0b5b9bdc097b6480c075
- SHA512 d693edf11f22041591391c62985f3b365555e4400acf8f9e84ed4488e07d596dbfab6ea2d5439db03e2116113d389f942b63211f060003e233d259681c4b85db
- TLSH T161D02282F072A049CEA8733BE020C0A83CE5AE00921B2007440822E3490D2623E90A08
- MD5 SHA1 SHA512 TLSH