Static task
static1
Behavioral task
behavioral1
Sample
Win_10_Tweak_r_pro.exe
Resource
win11-20240419-en
General
-
Target
Win_10_Tweak_r_pro.exe
-
Size
921KB
-
MD5
da4fddd246a9a8c106a9dc55cf8b3b81
-
SHA1
15d72b049573078b4595ba4adf1b97d1f1f95ec5
-
SHA256
a1dc21099488c32faebdaa692d2c2372fee663cf14b3ac01d93360bb16e5f8c5
-
SHA512
40bdd31f124e8653ea0dc3debd04c8da3edd0758ebc306b2c90e18dce3de8868d1e162bd229309577d8d233e701a48b1e41ad667749e0e8ae183a1dab90af8e3
-
SSDEEP
24576:TExeKr1xYvSWt3TGXHPgPbgmDUy1BlNqYiul5IokM:TnKr1xYvSWhG/2bJDSYD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Win_10_Tweak_r_pro.exe
Files
-
Win_10_Tweak_r_pro.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 900KB - Virtual size: 899KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ