Static task
static1
Behavioral task
behavioral1
Sample
TwitchLeecher.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TwitchLeecher.exe
Resource
win10v2004-20230220-en
General
-
Target
TwitchLeecher.exe
-
Size
373KB
-
MD5
1b6b7528368c4dcdb9f72c42cae54c6b
-
SHA1
c7149891f536b2d2e4b9408dfb78e44ddbe68eca
-
SHA256
9da435d0680c362bea87414d243705c8c7674a0b6da8a1eadb0c272f229b1bac
-
SHA512
ff2e63b33b428b95e9acb251b63e9e9dd9fb4831594118b881bb8becaed3bacad7aeeaf6956efaaa50c9a650ca6091be441f3318800dd8208ae4041dd6a8d21d
-
SSDEEP
768:DIUhKV97mkTOUmRkmCz+5mpjobaduvKu8w9gKCjcDC3oKhC6:thxyFokmCiopXW8w9Gjff
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TwitchLeecher.exe
Files
-
TwitchLeecher.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ