Ultimate Windows Tweaker 4[.]8[.]exe | Triage

Sharing

General

Target

Ultimate Windows Tweaker 4.8.exe
Size

660KB
MD5

dfd18eabcfa63ce63fdbebe4673e99c8
SHA1

e325611de3de808046018993338eca3c2ff09f0a
SHA256

b25b8e40616136045f021a9ac1e2143b3460caed08c01606820ca4fa4107e5f2
SHA512

0b67457095f0d7821e0c21f358c940af1ac6db2bdf7051b6c859a52423ff4c6f642cc614b7ef580894fa480d616bf173e3870907040180cf2a627d6875c80a83
SSDEEP

12288:3XlA18pVM/xw4alNt5ndTJWu4ugmp4AdcK99Pw:3XlAKz9vndTWAKI4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ultimate Windows Tweaker 4.8.exe

Files

Ultimate Windows Tweaker 4.8.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Guest Ji\My Projects\UWT\UWT 4\Windows Customizer Pro\obj\Release\Ultimate Windows Tweaker 4.8.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 633KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ