Static task
static1
Behavioral task
behavioral1
Sample
DwmLutGUI.exe
Resource
win10v2004-20240709-en
General
-
Target
DwmLutGUI.exe
-
Size
48KB
-
MD5
940026092c35c84f5de3369dbec24576
-
SHA1
679ec6ca51d3e47dfac2a1cdbe3b0b153be1b2b6
-
SHA256
4ac8778ddb796a771072f22cce6bba6fe36bcd7f10b66379ccc6c40fe7ff0a2b
-
SHA512
40a8893e3ebceb30d3f73eee5d5b6de8a2cff76387ec04955327b834bd487d0b3d7f9bcd251266a9b6aff634a527f3c1a089dc034836cd9d4df8d3918e9eb94c
-
SSDEEP
768:O/FOFRvMtpRGM7pnXm1V0q5nCI2CH8kSiJVDDDDDxVDDDDDsytYcFwVc6K:8E2XHq5nCI2K8kSiUewVcl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DwmLutGUI.exe
Files
-
DwmLutGUI.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ