Overview
overview
3Static
static
3AMD Radeon...es.bat
windows7-x64
1AMD Radeon...es.bat
windows10-2004-x64
1AMD Radeon... 1.lnk
windows7-x64
3AMD Radeon... 1.lnk
windows10-2004-x64
3AMD Radeon... 2.lnk
windows7-x64
3AMD Radeon... 2.lnk
windows10-2004-x64
3AMD Radeon....0.exe
windows7-x64
1AMD Radeon....0.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Clean Temp Files.bat
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Clean Temp Files.bat
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Temp 1.lnk
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Temp 1.lnk
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Temp 2.lnk
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Temp 2.lnk
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
AMD Radeon (NEW) Optimization Pack/4 - MSI Mode Utility 3.0/MSI Mode Utility 3.0.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
AMD Radeon (NEW) Optimization Pack/4 - MSI Mode Utility 3.0/MSI Mode Utility 3.0.exe
Resource
win10v2004-20230915-en
General
-
Target
AMD Radeon (NEW) Optimization Pack.rar
-
Size
19KB
-
MD5
8c62e169c331caa55d40a29bef4af303
-
SHA1
0499161a82d3e1f1e88efe1f6a257be64d77d2e9
-
SHA256
bac30fe1a9f871d5a979c2625613932c10b2d291db2a6f5f6954cda328b4964e
-
SHA512
7ac49d2d056c6fd634ef4984c8bda474e89a33b46962deb64b72298ae3e48cc8c119eb0f044f886ce42673f523711dc3fd5549325ba7bd7eb3a376dc215079ec
-
SSDEEP
384:Q0zq5ZKThsJy5TQYT+IzU4BA3shEpcbvaCQFmeB7R5i:QCq5ZKThs0TQYT+IzUoGculh5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AMD Radeon (NEW) Optimization Pack/4 - MSI Mode Utility 3.0/MSI Mode Utility 3.0.exe
Files
-
AMD Radeon (NEW) Optimization Pack.rar.rar
-
AMD Radeon (NEW) Optimization Pack/1 - AMD Registry Optimizations/AMD Priority.reg
-
AMD Radeon (NEW) Optimization Pack/1 - AMD Registry Optimizations/Boost PC Responsiveness.reg
-
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Clean Temp Files.bat
-
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Temp 1.lnk.lnk
-
AMD Radeon (NEW) Optimization Pack/2 - Clean Temporary Files/Temp 2.lnk.lnk
-
AMD Radeon (NEW) Optimization Pack/3 - GPU Energy Driver/Disable GPU EnergyDriver.reg
-
AMD Radeon (NEW) Optimization Pack/4 - MSI Mode Utility 3.0/MSI Mode Utility 3.0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ