Windows 11 Tweaks[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Windows 11 Tweaks.exe
Size

151KB
MD5

bd07ed06ac5e7be732eab0901dad12ac
SHA1

da56b12f164428f6a483f63e8ed459fbd30c16f7
SHA256

2577894fe648e594b5e0145385855af2149f04fdb9c222a90aeac8adbb456f7c
SHA512

fc841f75ece06b15ba84ade06c37cf87097595d8b5d0f67a4fcd9f41a9259c1a5eadadd11c76ef4c7f9dba70d0172f9e6f5fb7684b2c5a25beba39ce162600ef
SSDEEP

1536:rFb4qCbYh23MdKDw5+fk789WxGncNaTDdgc1OJhbqUUk6Q9fmU1shr7v80l+eqUy:rFb4fas0WUf6zV+tUU6qVDpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows 11 Tweaks.exe

Files

Windows 11 Tweaks.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ZCR\Documents\Projects\Windows 11 Tweaks\Windows 10 Tweaks\obj\Debug\Windows 11 Tweaks.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ