Static task
static1
Behavioral task
behavioral1
Sample
Avalon Tweaking Utility.exe
Resource
win10-20230220-en
General
-
Target
Avalon Tweaking Utility.exe
-
Size
1.9MB
-
MD5
6653de7906f7f43959bd08432501a631
-
SHA1
9edfbba238d6e6c111dd1bfc9f836f66da305c96
-
SHA256
a82a7c6e13973d6eb19590657f3c0a671a0ebce4bff602343e36784b4463fbce
-
SHA512
8184b3c8c739516c5c1cd818f686a65152b33dfda9a74bf59822e03951f5c1ce71f86705cbd7349cc5fc4fb97b9f9028ec4db1b9b96e4932b160a695637bb0ec
-
SSDEEP
49152:zt3UigFnlBIpExvhzbcO6qE2NybMHfIaR:ztEi6lBIpExOO6qE0h/Ie
Malware Config
Signatures
Files
-
Avalon Tweaking Utility.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
(1WM`] Size: 940KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 934KB - Virtual size: 933KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ