Static task
static1
Behavioral task
behavioral1
Sample
FrostyModManager.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
FrostyModManager.exe
Resource
win10v2004-20230703-en
General
-
Target
FrostyModManager.exe
-
Size
512KB
-
MD5
4f0bd4cacb8ae991d8da995f2b8c5f3a
-
SHA1
d928d192a2216f54b570d0695d1e32035093d102
-
SHA256
60ff323e8afbefeb3b4f0722ebe4f4c9d658f13b1b992d8764156b395c70fe62
-
SHA512
f61ab8f7827391405903a2d4e99f994d2ddbb22c97b6e78670d073f93fb1edc829e51f10e3610c28c8a3678acb4c8a76784737185f0bda30d142d4157802f081
-
SSDEEP
6144:oJr+n7jZKV5mG/x+PXXYUsaH8zU/82ihi/MJ2:kDJ+vaaHH/liA/t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FrostyModManager.exe
Files
-
FrostyModManager.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 367KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ