Optimizer-16[.]6[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Optimizer-16.6.exe
Size

2.4MB
MD5

d998782cbfcffe2b57945e303f02f176
SHA1

bba0fefa7823b0951f33b79708b23a47ab4f2315
SHA256

8b29c9349e7a814e30cce1cfb788f5a21740c798268b0a45ab805195faad9105
SHA512

4562723ca09057817ce66eb5596de858ec3a674e3b3b6a644b52d6ab1e5d4f8650423356853ed68a375e328c4a97b5f33b8639b31b32d8d58075fae7fa37734c
SSDEEP

24576:6bH3S9tsgX8zOXJvwEC8UJhHxHuZBjk38WuBcAbwoA/BkjSHXP36RMG:6T3S9tsgX8zEC8ULgCSA/Bkj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Optimizer-16.6.exe

Files

Optimizer-16.6.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

X:\Projects\GITHUB\optimizer\Optimizer\obj\Release\Optimizer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ