TIGER_Funding_Radar_v2.2.86_Windows.zip
- SHA256 5eceaeba17e3d39fdc1ba9b47121dc29ddaf0df7710780832300f0c0e942525c
Behavioral task
behavioral1
Sample
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral4
Sample
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
12 signatures
150 seconds
Behavioral task
behavioral5
Sample
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_User_Manual.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target TIGER_Funding_Radar_v2.2.86_Windows.zip
- Size 16.6MB
- Sample260925-xtsmasvx6j
- SHA256 5eceaeba17e3d39fdc1ba9b47121dc29ddaf0df7710780832300f0c0e942525c
- MD5 81406c453b3477f5d0e219eef776adcd
- SHA1 856b5e6f1add0164a968e336ab763dc172773daa
- SHA512 36c22058bf768bcd10f4af3a514b35ae3c61a01e3e61bc416933b4af1a29e3f1428617921f84e470672d4da39818c32f8eb5f6fd14e6fbd72979b44dd3165aab
- SSDEEP 393216:oJVq6YpcaCah0hkzVwcOgP0bYl2U3MXZ1c9Vb:omFCahy3YtMZ1Q
- TLSH T1FD073364787D4400E352BEBCF979FE7422A146027C3994AD594B8B607B35DEBC1E8C8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_User_Manual.pdf pdf_with_link_action - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86.exe unpack001/TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC.exe
File Explorer
-
TIGER_Funding_Radar_v2.2.86_Windows.zip.zip 16.6MB
-
TIGER_Funding_Radar_v2.2.86_Windows/README.txt664B
-
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86.exe.exe 13.6MB
-
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC.exe.exe 13.6MB
-
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_User_Manual.pdf.pdf 2.1MB
TIGER_Funding_Radar_v2.2.86_Windows/README.txt
- SHA256 ef14eabf64aa33034a8019e96aaa5fbd4fb2f6878ac9c9aa7d2d191284e13637
- MD5 0ef10589b21fd6e3e744d6015620acca
- SHA1 c23f1824380a8f3295c8391e6d8bc6734c49a17b
- SHA512 60871e0b513c091d620f7468359a9630861621c35d697032a780f47b6765ef5c68c1fb3043d57a87d347660e7172918c6b62174ad0edc0aa21471c52c81ab510
- TLSH T18D0199B3E62A01A485F921B1A80D92DBE77F31291393601034380389AC9976FF2B68A1
- MD5 SHA1 SHA512 TLSH
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 2797d2df889e11172deab9d65241a7d2484bf613062b71b58d50d562edad8014
- MD5 cbadca2b6c03f7ac2ad6db3fe8541c72
- SHA1 157a97142749721e31fa07e1de093b46c672fd20
- SHA512 e50598bc3dfe51a641e198b9e8a435e61bae78e4ad13358a3a6138578063f4327a1eda1d62a6bf920dd24c372429ef3666ea12f7a2208f394acf5cd8bafba9bc
- SSDEEP 98304:RYNBzvHOfaEh51yYc7UiiekEBlcRSZHedZkfXw8wyCdpmwHre8ONa/1IMlx9387I:wOfaEh6YQiedQ//5bO0+c9sr2D
- TLSH T13AE67C47ECA444A9C4AAD235C5B68253BA717C484B3133E76F90F6B82F77BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
478400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
515KB
Virtual Size
827KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
332B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
668KB
Virtual Size
667KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
141KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
933KB
Virtual Size
933KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/90
Size
263KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
539KB
Virtual Size
539KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 4cb5d5b3a2cf74125de87f88a0352729acf70beb43c1cde1c3836e282acce953
- MD5 9a871663183a7f48d434d0789dd288c7
- SHA1 d6605d56e66151df6e92c20cc622b855a6ad718d
- SHA512 7723ef103f5fbcde1964e7ce54a6e253de29b88af438d2de0700eb49676a902903b9da47660dcd8aad5395d6507307b223c22745e75797dcc632d7e34d49d1aa
- SSDEEP 98304:CYNBzvHOfaEh51yYc7UiiekEBlcRSZHedZkfXw8wyCdpmwHre8ONa/1IMlx9387I:ZOfaEh6YQiedQ//5bO0+c9sr2D
- TLSH T107E67C47ECA444A9C4AAD235C5B68253BA717C484B3133E76F90F6B82F77BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
478400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
515KB
Virtual Size
827KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
332B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
668KB
Virtual Size
667KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
141KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
933KB
Virtual Size
933KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/90
Size
263KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
539KB
Virtual Size
539KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_User_Manual.pdf
- SHA256 eb022a8689f8fb1f033110e282c7d5f1193601b1c607c861161e37a169609e8d
- MD5 937fa46af9b71a8e22a8e7d561335ff9
- SHA1 4ab3102c441f32b5937290dc94746420153529f1
- SHA512 b61489fb9b507408551323e7596ddf22cdf53e4cd64682ff21447e27153bae173f6c9c57640601066f361f2db6286966ff85b634b5893a90cc5b0c569412b88d
- SSDEEP 49152:bZ5rQAkWXEGFX2GZITkkZEEEEEEEEEEEEEEWvrYzy7c:Vo+E6X2fTkkGay4
- TLSH T165A5F134A45A899CF84E97399D643B350A6DBE0397CEA497F0DECE05B3489F087960D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://help.openalex.org/api/authentication/
-
file https://openalex.org/settings/api
-
file https://openalex.org/signup