VTweaker_Premium_1[.]4[.]2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VTweaker_Premium_1.4.2.exe
Size

5.3MB
MD5

386007d3353c641136961d565f09a38d
SHA1

8ca16d528ee5eb04284f21910c963087729c5cd3
SHA256

7ac03c97e86ac0c6a9ae7dbbdd83e03bc941f2d5870f7849ae365742e92179b8
SHA512

9a817d0f89444abd9e259a6494651144152f3897f7e6c49f111538d0749704fd7f9e4721ddd32aa4a883584dfbe70a172782610c6f63bba0e350cf16c988ac05
SSDEEP

98304:defA9M2WKSB2WKSIGdh3Ym5daZdjObRB+KH4kpc+DX/0HcApMsMMC:UfAi2tY2tVG3YmOZdzKYODFApMTMC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VTweaker_Premium_1.4.2.exe

Files

VTweaker_Premium_1.4.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ