D:\TweakMB\TweakMB\MB test\obj\x86\Debug\TweakMB.pdb
Overview
overview
3Static
static
3TweakMB.zip
windows7-x64
1TweakMB.zip
windows10-2004-x64
1TweakMB/Ex...34.txt
windows7-x64
1TweakMB/Ex...34.txt
windows10-2004-x64
1TweakMB/Ex...43.txt
windows7-x64
1TweakMB/Ex...43.txt
windows10-2004-x64
1TweakMB/Ex...53.txt
windows7-x64
1TweakMB/Ex...53.txt
windows10-2004-x64
1TweakMB/Ex...58.txt
windows7-x64
1TweakMB/Ex...58.txt
windows10-2004-x64
1TweakMB/Ex...13.txt
windows7-x64
1TweakMB/Ex...13.txt
windows10-2004-x64
1TweakMB/Ex...34.txt
windows7-x64
1TweakMB/Ex...34.txt
windows10-2004-x64
1TweakMB/Ex...43.txt
windows7-x64
1TweakMB/Ex...43.txt
windows10-2004-x64
1TweakMB/Ex...52.txt
windows7-x64
1TweakMB/Ex...52.txt
windows10-2004-x64
1TweakMB/Ex...53.txt
windows7-x64
1TweakMB/Ex...53.txt
windows10-2004-x64
1TweakMB/Ex...58.txt
windows7-x64
1TweakMB/Ex...58.txt
windows10-2004-x64
1TweakMB/Ex...38.txt
windows7-x64
1TweakMB/Ex...38.txt
windows10-2004-x64
1TweakMB/Ex...43.txt
windows7-x64
1TweakMB/Ex...43.txt
windows10-2004-x64
1TweakMB/TweakData.mdb
windows7-x64
1TweakMB/TweakData.mdb
windows10-2004-x64
3TweakMB/TweakMB.exe
windows7-x64
1TweakMB/TweakMB.exe
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
TweakMB.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
TweakMB.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
TweakMB/Extra Files/wb_conversation_1134.txt
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
TweakMB/Extra Files/wb_conversation_1134.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
TweakMB/Extra Files/wb_conversation_1143.txt
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
TweakMB/Extra Files/wb_conversation_1143.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
TweakMB/Extra Files/wb_conversation_1153.txt
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
TweakMB/Extra Files/wb_conversation_1153.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
TweakMB/Extra Files/wb_conversation_1158.txt
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
TweakMB/Extra Files/wb_conversation_1158.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
TweakMB/Extra Files/wb_mission_templates_1113.txt
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
TweakMB/Extra Files/wb_mission_templates_1113.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
TweakMB/Extra Files/wb_mission_templates_1134.txt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
TweakMB/Extra Files/wb_mission_templates_1134.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
TweakMB/Extra Files/wb_mission_templates_1143.txt
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
TweakMB/Extra Files/wb_mission_templates_1143.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
TweakMB/Extra Files/wb_mission_templates_1152.txt
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
TweakMB/Extra Files/wb_mission_templates_1152.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
TweakMB/Extra Files/wb_mission_templates_1153.txt
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
TweakMB/Extra Files/wb_mission_templates_1153.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
TweakMB/Extra Files/wb_mission_templates_1158.txt
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
TweakMB/Extra Files/wb_mission_templates_1158.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
TweakMB/Extra Files/wfs_mission_templates_1138.txt
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
TweakMB/Extra Files/wfs_mission_templates_1138.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
TweakMB/Extra Files/wfs_mission_templates_1143.txt
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
TweakMB/Extra Files/wfs_mission_templates_1143.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
TweakMB/TweakData.mdb
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
TweakMB/TweakData.mdb
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
TweakMB/TweakMB.exe
Resource
win7-20240419-en
Behavioral task
behavioral30
Sample
TweakMB/TweakMB.exe
Resource
win10v2004-20240508-en
General
-
Target
TweakMB.zip
-
Size
1.5MB
-
MD5
a253f55df0e88cb5d8e7192cff32ec22
-
SHA1
f310efba3d74484dc6126ab44bff9868a21e216c
-
SHA256
9a54595ff1993c01b9c3060988dfb3602fc37c577a2521b9aea4a61262291922
-
SHA512
e642154e06d3d1e9c1c681216ea4e9656a2c46eef879b398c41032f8eeff7219bd6adfaae48be1034368d50c78e072aa4e69360101ccca786af79302a9a98f35
-
SSDEEP
24576:tpEjUeardx8Px1vMXV6LqJDfrW4t4pufR1SDir4h+yR57OsGs0:fEwe3p1El6OJTST81SmrI+yL7V0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TweakMB/TweakMB.exe
Files
-
TweakMB.zip.zip
-
TweakMB/Extra Files/wb_conversation_1134.txt
-
TweakMB/Extra Files/wb_conversation_1143.txt
-
TweakMB/Extra Files/wb_conversation_1153.txt
-
TweakMB/Extra Files/wb_conversation_1158.txt
-
TweakMB/Extra Files/wb_mission_templates_1113.txt
-
TweakMB/Extra Files/wb_mission_templates_1134.txt
-
TweakMB/Extra Files/wb_mission_templates_1143.txt
-
TweakMB/Extra Files/wb_mission_templates_1152.txt
-
TweakMB/Extra Files/wb_mission_templates_1153.txt
-
TweakMB/Extra Files/wb_mission_templates_1158.txt
-
TweakMB/Extra Files/wfs_mission_templates_1138.txt
-
TweakMB/Extra Files/wfs_mission_templates_1143.txt
-
TweakMB/TweakData.mdb
-
TweakMB/TweakMB.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ