Tweaker.pdb
Static task
static1
General
-
Target
Tweaker.exe
-
Size
83.2MB
-
MD5
7c41e356ff2f57cda11487f9042e6cbf
-
SHA1
867fd83a1928e1e3e09a6f2437141a8036b78246
-
SHA256
7161bae23d215de04a396593177db185d051332cf7ee228313b8c3e6d4229b76
-
SHA512
e9c0d38b5913e4524eee0c9a93aec320929587d3a0566eb8777e4c380c30a1dc7f59b8eb6afe818c66061ec247832246fcf662919c77bcc7d3474ae51a1ab69d
-
SSDEEP
1572864:MgMAQq26/qyc5D0gMU3TjJ7ZwetNddsP0KpUOR6IYAuG2B:cAQX65gbvJ7ZHvy0xAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Tweaker.exe
Files
-
Tweaker.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 83.2MB - Virtual size: 83.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ