Static task
static1
Behavioral task
behavioral1
Sample
Outfit Editor.exe
Resource
win10v2004-20240508-en
General
-
Target
Outfit Editor.exe
-
Size
1.6MB
-
MD5
73168ce148a27ee9e5e077fb149d31b3
-
SHA1
7c1ae2d81a6a1ceb9fdf70152847d771a861156c
-
SHA256
1d196fdc058f66fbf367ba82280d018150627f053c3736430413cce6534cf776
-
SHA512
e810cdb3bc860e88067e69c46e01bd8339452273bf0dfffe77519af51a9e6936f3f91013d189f710c8be28cb455891c81c0a4b9bfe1abd5074e65c9a0c4aa7a1
-
SSDEEP
24576:tURW3fnfX4JKI7YkhCL7zsnoNT0bxteS7QpFZIdZGT01O/D67p9LVcxo5:KKn4R7HEzss0bnjcJWGUQD67XL9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Outfit Editor.exe
Files
-
Outfit Editor.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ