Static task
static1
Behavioral task
behavioral1
Sample
WealthBoosterOverlay.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
WealthBoosterOverlay.exe
Resource
win10v2004-20230621-en
General
-
Target
WealthBoosterOverlay.exe
-
Size
340KB
-
MD5
babe87a54cf09558f62b902634d9abd6
-
SHA1
677ceeba9b421bae7ed506bc3a05f86c3ca74989
-
SHA256
5abfe4ec1be74b933c4773fd521d33c7206e6fe21dd1fd5c733f42dc6194aa75
-
SHA512
df9b6e8fa27d486536a5439c3bf59c5094bbbf530fa34dfef0271c9aca51082bfc441c069ee9ce57043664a1085195c53245bfded7e8c1bf7c2cfad39317327c
-
SSDEEP
6144:VToUich/Brvvl9eJ9+JhhWoUh5h5hJh5h5h5h:Jic1BrhhvUh5h5hJh5h5h5h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WealthBoosterOverlay.exe
Files
-
WealthBoosterOverlay.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 337KB - Virtual size: 337KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ