Static task
static1
Behavioral task
behavioral1
Sample
UltraISO.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
UltraISO.exe
Resource
win10v2004-20230220-en
General
-
Target
UltraISO.exe
-
Size
1.6MB
-
MD5
baef4538483e03a0b9daf9f3e2d093bf
-
SHA1
3d5fe62608b054b1817fc7540cfdb73bb02a41f1
-
SHA256
4e8f6f12c87f92051fa0550238e9d850142d85e265f7927fa8634647bef6463d
-
SHA512
1cd5c9bee424f18cf69d0f135d6a866ff8bcd52c559d9b84a36cbfc0cdd78ab8c9921e6247124e867b04d639b7b9dc060d31f22e3c5f6ac394ca24b031c01d73
-
SSDEEP
49152:XsXM2ZvIbBEtKR8Xue2bOdvInvbwlSg/4FFH7I4L:cXNdIUK5BOdvk6E04L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource UltraISO.exe
Files
-
UltraISO.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ