Static task
static1
Behavioral task
behavioral1
Sample
Optimizer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Optimizer.exe
Resource
win10v2004-20230220-en
General
-
Target
Optimizer.exe
-
Size
6.9MB
-
MD5
fc3a32df128ad0cdd37ce6d8f76838b2
-
SHA1
f6ce599ade4335a479c8feecbeedd9a83d203098
-
SHA256
4c49164629177754ade7d0e495d05853edc6aeae1ed122b8862ab1886b4cf198
-
SHA512
28c47d0736c912d49b93b618362ab9fb855de7be828ccecb458de6a557d8e67bee57183f2fd5be9f5665512725011b4d53cfdc19de7cf2baaa74978377498454
-
SSDEEP
196608:gEYGG5mUPbz3zFosmKiXjGigOKiIUZSoqV:bYGY9brBPLizGiSPV
Malware Config
Signatures
Files
-
Optimizer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ