Optimizer-16[.]2[.]exe | Triage

Resubmissions

03-08-2024 00:31

240803-avfykawhnk 10

03-08-2024 00:27

240803-ar85ya1dme 3

Sharing

General

Target

Optimizer-16.2.exe
Size

2.3MB
MD5

a806a06bb01fd05fe4b684926eced231
SHA1

6f847968172f872e847bf782a9b7e320b4f42c1f
SHA256

d97a8782b1563f7c7ca71b9094f90c1737e8a04119501196e5c7ea7f30857393
SHA512

da773db62f89a504adb23d1627d7447d348c10edaabff396169bb48609ddfc4d7d007ecec515949a2f0e0d6a1c7fc43b0d1915618d6ad6aa3b2168cf38d47052
SSDEEP

24576:yMT024X4/G2hfOTJvZEC8UJkJBjk38WuBcAbwoA/BkjSHXP36RMG:yMo24X4/G2huEC8UeJCSA/Bkj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Optimizer-16.2.exe

Files

Optimizer-16.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

X:\Projects\GITHUB\optimizer\Optimizer\obj\Release\Optimizer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ