Static task
static1
Behavioral task
behavioral1
Sample
ClassicUO.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ClassicUO.exe
Resource
win10v2004-20230703-en
General
-
Target
ClassicUO.exe
-
Size
1.9MB
-
MD5
2d4e40e5d2019ee7879acdbc877ca920
-
SHA1
854f2f93301031a0b46c0cc1e6db7743f01b1837
-
SHA256
93cd78f5b79096cbef5a03a9c3d9f645d0360f8641a37ec0bef17f9f6277d5ce
-
SHA512
9b61afe37d3a1fb4c7b6661acdfec8a593705dbc42dfaebd85d00b013df099243b4f7a1f601340fd96636ea53c2a0ff438cf9ff8b203277516463ab79f6fd3e8
-
SSDEEP
24576:q1zReIo4cKh4r3XK7q60pb6Yj/q2L/K0qktbmKFV34AwYeL/3VtXYvpauMe9iP/N:aRbo4cbtbBXRg3Vt84y+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ClassicUO.exe
Files
-
ClassicUO.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ