Static task
static1
Behavioral task
behavioral1
Sample
TCPOptimizer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TCPOptimizer.exe
Resource
win10v2004-20230221-en
General
-
Target
TCPOptimizer.exe
-
Size
644KB
-
MD5
58b3fec456caf35d2a77aa5baf18549b
-
SHA1
6cb5f29e039fa42fb922146052ec1a54c2c28132
-
SHA256
4ac51e1cfc7b338d6cb832cbc7d2fc72443301e1082aabd68a11f22062e5dbd1
-
SHA512
209af57c48b79e12646039b98f7ce0717e3ec0e4f8f85f433006a0c6fdf20d79552b7254897fd7a4a4714071ea3583fe563d860cb2ec461ed231a9ec897634c7
-
SSDEEP
12288:iokGs+bocbZIlpHmht+u1WQzmVMO1MaW5e:fRtZ4mht+u1WQzUMOSa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TCPOptimizer.exe
Files
-
TCPOptimizer.exe.exe windows x86
1bb2167bc9aaa5e7e162a1235a14619c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
GetEnvironmentStrings
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetProfileStringA
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
TerminateProcess
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
HeapFree
ExitProcess
GetStartupInfoA
RaiseException
ExitThread
CreateThread
RtlUnwind
CopyFileA
lstrlenW
GlobalSize
SetErrorMode
FindResourceExA
GetOEMCP
GetCPInfo
GlobalFlags
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
SuspendThread
SetThreadPriority
GetTickCount
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
VirtualProtect
lstrcmpA
SetLastError
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetPrivateProfileStringA
MultiByteToWideChar
InterlockedIncrement
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedDecrement
GetModuleFileNameA
ReadFile
CreatePipe
DuplicateHandle
GetStdHandle
CreateProcessA
GetCommandLineA
SetThreadLocale
TerminateThread
InterlockedExchange
lstrcpynA
SleepEx
Sleep
LoadLibraryA
FreeLibrary
lstrcmpiA
GetVersionExA
GetModuleHandleA
GetProcAddress
GetSystemInfo
SetEvent
ResetEvent
WaitForSingleObject
FindResourceA
LoadResource
SizeofResource
LockResource
ResumeThread
MulDiv
GlobalFree
CreateEventA
GetPrivateProfileIntA
GetCurrentProcess
WriteFile
GlobalAlloc
GlobalLock
GlobalUnlock
CreateFileA
CloseHandle
WritePrivateProfileStringA
lstrlenA
WinExec
GetLastError
lstrcpyA
IsBadCodePtr
lstrcatA
user32
MessageBeep
CharNextA
CopyAcceleratorTableA
DispatchMessageA
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetScrollInfo
SetScrollInfo
GetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
wsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
UnhookWindowsHookEx
GetLastActivePopup
IsWindowEnabled
ExitWindowsEx
IsIconic
DrawIcon
GetSystemMenu
LoadIconA
PostThreadMessageA
SetMenuDefaultItem
SetMenuItemInfoA
LoadMenuA
GetSubMenu
SetForegroundWindow
TrackPopupMenuEx
CreatePopupMenu
AppendMenuA
GetNextDlgTabItem
GetKeyState
KillTimer
SetTimer
DestroyCaret
CreateCaret
SetCaretPos
ShowCaret
EnableScrollBar
ShowScrollBar
GetFocus
GetClassInfoA
DefWindowProcA
IsWindow
RegisterClipboardFormatA
GetNextDlgGroupItem
GetCapture
SetCapture
ReleaseCapture
InflateRect
DrawStateA
ClientToScreen
GetSysColorBrush
FrameRect
LoadStringA
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
MessageBoxA
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
wvsprintfA
DrawFocusRect
DrawTextA
OffsetRect
LoadBitmapA
SetCursor
LoadCursorA
CopyRect
GetSysColor
FillRect
GetDC
ReleaseDC
SetRect
GetParent
PostMessageA
SendMessageA
EnableWindow
GetClassNameA
GetWindowLongA
SetWindowLongA
ScreenToClient
PtInRect
SetWindowContextHelpId
GetDlgItem
IsZoomed
DrawFrameControl
BeginDeferWindowPos
DeferWindowPos
InvalidateRect
EndDeferWindowPos
EqualRect
UpdateWindow
GetClientRect
GetWindowRect
GetSystemMetrics
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
DestroyMenu
GetDesktopWindow
CharUpperA
WindowFromPoint
MapDialogRect
GetAsyncKeyState
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PeekMessageA
SendDlgItemMessageA
GetCursorPos
MapWindowPoints
gdi32
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetMapMode
DPtoLP
EnumFontFamiliesExA
CopyMetaFileA
GetTextColor
GetBkColor
LPtoDP
SetBkMode
RestoreDC
SaveDC
SetBkColor
GetClipBox
CreateRectRgnIndirect
Polygon
Polyline
GetCharWidthA
GetStockObject
RoundRect
SetPixel
MoveToEx
LineTo
CreateBitmap
CreatePen
CreateFontIndirectA
SetTextColor
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
GetDeviceCaps
SetMapMode
GetTextExtentPoint32A
StartDocA
StartPage
EndPage
EndDoc
CreateDIBitmap
GetTextExtentPointA
DeleteDC
comdlg32
GetOpenFileNameA
PrintDlgA
GetSaveFileNameA
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
InitiateSystemShutdownA
RegDeleteKeyA
RegEnumKeyExA
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
ImageList_AddMasked
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
oledlg
ord8
ole32
CreateStreamOnHGlobal
CoTaskMemFree
ReleaseStgMedium
OleGetClipboard
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CLSIDFromString
OleDuplicateData
CoTaskMemAlloc
CoRegisterMessageFilter
CoGetClassObject
CoRevokeClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
olepro32
ord251
ord253
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
wsock32
ioctlsocket
WSACleanup
WSAStartup
inet_addr
htonl
gethostbyname
Sections
.text Size: 324KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ