Static task
static1
General
-
Target
Shady Tweaks.exe
-
Size
1.0MB
-
MD5
9d3f1f083667d6655b6fec66ba99ec72
-
SHA1
57866aff6e620646a21aad2d392e62283d42ffbe
-
SHA256
1086e7570907789866ddab685f361d30567a2d9846cdf14305d20febe64c5cc3
-
SHA512
d2483dd09c7ae8ca90f106d43ad9192c27c008330f7e9edcf9ec616a05aebcc2b9200124b9c3232c61314ead040636d0457ba7e3a8955370326b59f192215dd1
-
SSDEEP
3072:/liJhX/F/V/K/nILC4GF/8mJtzgS8EGUrMiHRTpBAkbHVoDeOWqZ++IYe9dZK1BO:ZB2COWwpQ4H4upYW4alsZB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Shady Tweaks.exe
Files
-
Shady Tweaks.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 788KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ