Static task
static1
Behavioral task
behavioral1
Sample
Optimizer-16.5.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Optimizer-16.5.exe
Resource
win10v2004-20240508-en
General
-
Target
Optimizer-16.5.exe
-
Size
1.1MB
-
MD5
1189fe3414a4b9c4a228745a21eb8ade
-
SHA1
885f92a53c1e990bee847f765b6cac90a5216dea
-
SHA256
dececde4bf14f513007b0d2989b77f66a004fc073c742b6d6e38d36a043cc042
-
SHA512
51de1f053ef2f2cc396a205d76355c1a148fbf49f093287ab3d740de2616b95d3264d427a19c8aa2af9e5cba9c4899ae4bb0ef982386c18bb60cd1fb17040e15
-
SSDEEP
24576:F4PJsbumk/X/MKBDjaEzq66Q2gYdXvbMc1/x+8ZIV9ezeE/0/x4:qJok/X/MKBvaw6h9dXZ1/E8o9uey0O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Optimizer-16.5.exe
Files
-
Optimizer-16.5.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ