CPU Optimization Pack[.]zip

Resubmissions

30/05/2024, 07:52

240530-jqk66acb88 9

30/05/2024, 07:49

30/05/2024, 07:46

30/05/2024, 07:45

30/05/2024, 07:43

Sharing

Copy URL Twitter E-mail

General

Target

CPU Optimization Pack.zip
Size

449KB
MD5

03e037572e0c405c9457eb5812468265
SHA1

f61aeb6f0f745143f903b78f3daae6e35866b502
SHA256

55575cb7f0ced9114e7c8b6ffe8081bed842d8dc9ac1b57cc69ca66534c7aac6
SHA512

5b8ac6a2dcbf46690f23c81dffbad46ce6b53e3dffc3764a61f7ceaf2a29ada9185d9e0ad26648d74f8b5a1c890f4f1ee679dc855663bfb097fc0952d9a34314
SSDEEP

6144:dw/eAt1P1KivbUVCJjW/wQsTtKaixn9hfoaTq4h0IxQ9FxQs7tp1xnRMg4MdYe3d:u/FRbyCJjW/njhdfh0aQzuu7ARIH9

Score

1^/10

Malware Config

Signatures

Files

CPU Optimization Pack.zip
.zip
CPU Optimization Pack/BCD Tweaks.cmd
CPU Optimization Pack/Basic Optimization Regedit.reg
CPU Optimization Pack/CPU Speed.reg
CPU Optimization Pack/Disable Memory Compression.cmd
CPU Optimization Pack/Disable Spectre & Meltdown.reg
CPU Optimization Pack/Memory Management Optimizations.reg
CPU Optimization Pack/Unpark CPU Cores/UnparkCpu.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:71:0d:c4:23:c7:d0:00:e3:0b:ae:9f:11:ae:11:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15/10/2019, 00:00

Not After

04/01/2023, 12:00

Subject

SERIALNUMBER=201927010957,CN=CoderBag\, LLC,O=CoderBag\, LLC,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84
Signer

Actual PE Digest

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CPU Optimization Pack/Updated Power Plan/Disable Power Throttling.reg
CPU Optimization Pack/Updated Power Plan/Import_P_P.reg
CPU Optimization Pack/Updated Power Plan/Power Plans.lnk
.lnk
CPU Optimization Pack/Updated Power Plan/RekOS PowerPlan.pow
CPU Optimization Pack/Wake Up All Cores.reg

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

0b:71:0d:c4:23:c7:d0:00:e3:0b:ae:9f:11:ae:11:51Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 627KB - Virtual size: 626KB

.rsrc Size: 240KB - Virtual size: 239KB

.reloc Size: 512B - Virtual size: 12B

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:71:0d:c4:23:c7:d0:00:e3:0b:ae:9f:11:ae:11:51
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84
Signer

.text
Size: 627KB - Virtual size: 626KB

.rsrc
Size: 240KB - Virtual size: 239KB

.reloc
Size: 512B - Virtual size: 12B