Static task
static1
Behavioral task
behavioral1
Sample
Total Uninstall Professional.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Total Uninstall Professional.exe
Resource
win10v2004-20230703-en
General
-
Target
Total Uninstall Professional.exe
-
Size
186KB
-
MD5
1cb7273334e1f7669df71dee4bf9d99b
-
SHA1
4751acf52dc8edb0fe7ee22e35c5e8a9b89dc756
-
SHA256
82173e481da69e58688c5221a5ff8e260fd50f0bbb0e2064def8620dcd0d5214
-
SHA512
cb121c93876fadcce0a74afc6cdee28d89bc776d626e15469be161a059c6b97077ce6eddda664b76340d9a9057888c8ae1bc611abf8b83e212220cb0aeae0583
-
SSDEEP
3072:8I+SSSSSIBfSSxSatS9SSJwNmhRq3ZyW2woK2o5D7AVmpOasaZ3o:zsm8COzampOas23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Total Uninstall Professional.exe
Files
-
Total Uninstall Professional.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ