Static task
static1
Behavioral task
behavioral1
Sample
FrostWare.exe
Resource
win10v2004-20240709-en
General
-
Target
FrostWare.exe
-
Size
1.3MB
-
MD5
188b22dfd857e90ab20020ef77dcd74a
-
SHA1
bbb54d05e8c965990ffd19c9851080009366b83e
-
SHA256
db0e0ca30f18b159986a91611c9583c2f985b95a66fc6fe13b8162678d4adc7c
-
SHA512
2636ff8e61e96cc1a0b00b0a0c016f6f4a7051e45a74e596706e53cf889d403b1c3bfa124c9f56ed5557a71b2cf5db7e9b274c10bfa3b991c7c751dee77e2053
-
SSDEEP
24576:lT+U8a2MQo5RmKcMzB6UQRoz3wRk/zsO5xyHNef+JW5KH2iEdgR+CrK:02zHt6CrwRk/oO54HNE+JW5nqZr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FrostWare.exe
Files
-
FrostWare.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ