Static task
static1
Behavioral task
behavioral1
Sample
DoubleUI.exe
Resource
win10v2004-20231127-en
General
-
Target
DoubleUI.exe
-
Size
166KB
-
MD5
fa7f2f7258637334c10aa72b485e8e53
-
SHA1
5c8b7761703492d640769824d73874b82ada3d01
-
SHA256
83829935dcc533dceae3a82d957643464fdfede63599a223f1c8ecce85dfe956
-
SHA512
2d0591d54bda8b58bab9db1654f8d512fa2f0046db131b32eb03b144832a022bffaadb5ae88d08229d26709df6f8d3b83048736a59b2842bbb3d90aa700e9e0b
-
SSDEEP
768:Bzp0o5RTdohivSlbXPF4NnK8UWiipQplHxyJF9I8KHbGfQpsIQWeO+Y1xFu:BLbvSlbXPFARUl34KHbiN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DoubleUI.exe
Files
-
DoubleUI.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ