Static task
static1
Behavioral task
behavioral1
Sample
Optimizer-15.3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Optimizer-15.3.exe
Resource
win10v2004-20230220-en
General
-
Target
Optimizer-15.3.exe
-
Size
2.1MB
-
MD5
2f348d2a190018f08e51989935fe61de
-
SHA1
ef48a23bdee3f46858e5dcdfd0e7ba9dde8950d6
-
SHA256
0f225c69528a10e2e4616bf00cb5164b8a010f630d774ac2989916d477cf75fd
-
SHA512
0ad3f4b18219ffe3ce6181914c9055e2d39528b2f67a769bba50f55a6beb12c66d54ef9826d044e42c957dab95d417e7377a3f3edbd1ed1a3ca5762b99a09e6e
-
SSDEEP
24576:fGcUJpH5PVM8Iqck4nTED8yJgYWw7Bjk38WuBcAbwoA/BkjSHXP36RMG:fGcU7JVM8Iqc5ED8yuYWw7CSA/Bkj0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Optimizer-15.3.exe
Files
-
Optimizer-15.3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ