Static task
static1
Behavioral task
behavioral1
Sample
Stix Free Utility V1.0.0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Stix Free Utility V1.0.0.exe
Resource
win10v2004-20240802-en
General
-
Target
Stix Free Utility V1.0.0.exe
-
Size
4.2MB
-
MD5
c0824328e8218c78fde712b11154d514
-
SHA1
c733ab51483097d286b8afc295627b11aa67ce52
-
SHA256
f42a5d02a5131c2c24b4b82ebc02f8d752b745f279b63bba6a24411a5ef0a884
-
SHA512
f625e2599d62396f61b89aa86b250a76715ee5719e0534da8400e8f9e2ba0d04873eaea7bdc55462029f02297e2c42450837d98e93d4bac9f522c7e4f3f04d83
-
SSDEEP
24576:waKe+2qSUfwqHi4kZmR8MMjUt51PVhD4QX0ifuIa3slKyJaL+pDcbICY:wNYq25Ut3LXVKyJ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Stix Free Utility V1.0.0.exe
Files
-
Stix Free Utility V1.0.0.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
!Sugar Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ