c:\6xq3sdhr4lblz7\obj\Release\' .pdb
Static task
static1
Behavioral task
behavioral1
Sample
UIExecutor.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
UIExecutor.exe
Resource
win10v2004-20240802-en
General
-
Target
UIExecutor.exe
-
Size
309KB
-
MD5
17f48623037e9b13a7413a9b9107d189
-
SHA1
0a65552f61b7c38c6a1f8f7cb43727ff5ff30b44
-
SHA256
d365065eb8f74487a0107fc60ffd8e2601331eb6c711d506551f605948561f00
-
SHA512
ac153a8aef2a68b3b2e177d793087e17bd7222acae75066a6d1be8655575f723d32bebc0b93cbac17e78c3b8fd007b16b7935b6f11fc7425d8c2324129eae70d
-
SSDEEP
6144:7woZoYawlpEK3hWllbuN9OzswDx24x12l3jyhoxq9Cb7VmtL:WYawcu9Ozsw8c1GABq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource UIExecutor.exe
Files
-
UIExecutor.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 306KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ