Static task
static1
General
-
Target
AddonPeds Editor.exe
-
Size
517KB
-
MD5
16c4a346159ebd9497f7b77a044f99ee
-
SHA1
295c2c9b582b288cf476305908b89f5e9c19cd1b
-
SHA256
b19ae4a8608c9f84fa8685712ff4458854635b09a9d47a13a64e1278d39b1ce9
-
SHA512
1020af0d99b344102e9b6f0c956d61bbd8479a2541d80a6ec4ce1eb009d121960d56d4315d4b60972d9308463174046a895638592c1f3410fec621bf5f9278d0
-
SSDEEP
3072:yB/UZgSUsDv1UjGcZuULjX+TwgwgwgwE/qCiUUNYNPDlMez2wDwb:4/zX++CiU8kz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AddonPeds Editor.exe
Files
-
AddonPeds Editor.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ