Sigma Services Optimiser[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Sigma Services Optimiser.zip
Size

2.1MB
MD5

cc1ca4e3ab627f43bbc5ddce04690740
SHA1

89662f2c10183a9fa0d8934d5af378db7971a4c9
SHA256

7e18a8bf2829155cb2ba57d528b307f4fa691a3e587e7ec5bdedfa1463419f3e
SHA512

3a91c0caec8b8bc5693e8fd40a169af685b9bdec4a9f505ae5656ea2d5a4fe780f0a3d83a5504ed1e84aafb7a958b8767ad40cef0945421a5d3e6116db1e91c5
SSDEEP

49152:LUEhbUqZGduprw25aQSSKlLJ2vbzklVSVYcbxJ:LDbUTGrNaQHKlLJ0bgl6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Msi mode/MSI_util_v2.exe
unpack001/Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/NVIDIA_Inspector Tweaks/nvidiaProfileInspector.exe
unpack001/Sigma Services Optimiser/SIGMA-FFFFFF.exe

Files

Sigma Services Optimiser.zip
.zip

Password: sigma
Sigma Services Optimiser/Extra Optimisations/AMD CPU/Ryzen Bios Tweak.txt
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/1. Disable Startup apps.lnk
.lnk
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/10. Image.png
.png

Password: sigma
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/11. Pause Updates.url
.url
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/2. Store Update Apps Automatically Off.lnk
.lnk
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/3. Automatically Update Maps Off.url
.url
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/4. Disable Background Apps.url
.url
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/5. Remove Startup Apps.url
.url
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/6. Restart Apps Off.url
.url
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/7. Sync Your Settings Off.url
.url
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/8. Disable all of the app permissions.url
.url
Sigma Services Optimiser/Extra Optimisations/Disable windows servics/9. Click custom and tick the 2 in da image.lnk
.lnk
Sigma Services Optimiser/Extra Optimisations/INTEL CPU/Intel Bios Tweaks.txt
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/COPY THE IMAGES/DDU AMD.PNG
.png

Password: sigma
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/COPY THE IMAGES/DDU NVIDIA.PNG
.png

Password: sigma
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/COPY THE IMAGES/THEN CLICK CLEAN AND RESTART.txt
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/DDU Logs/2022-12-16__17-47-39_DDULog.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/DDU Logs/2022-12-16__18-14-33_DDULog.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Display Driver Uninstaller.exe
.exe windows:4 windows x86 arch:x86

Password: sigma

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

a2:43:2c:58:81:d6:5f:6a:71:46:96:3b:2c:43:f5:a4
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/03/2021, 00:00

Not After

25/03/2023, 23:59

Subject

CN=Wagnardsoft,O=Wagnardsoft,POSTALCODE=J7N 0W5,STREET=16915 Rue de la Perle,L=Mirabel,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:d9:b9:21:47:40:7c:69:c3:f9:b8:11:4f:1e:f4:c9:01:55:ef:f9:25:ac:95:6c:36:e3:fb:21:08:a4:d6:c9
Signer

Actual PE Digest

51:d9:b9:21:47:40:7c:69:c3:f9:b8:11:4f:1e:f4:c9:01:55:ef:f9:25:ac:95:6c:36:e3:fb:21:08:a4:d6:c9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ghisl\OneDrive\Documents\Programmation\wpf\display-drivers-uninstaller\display-driver-uninstaller\Display Driver Uninstaller\obj\Release\Display Driver Uninstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Display Driver Uninstaller.pdb
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Issues and solutions.txt
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Licence.txt
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Readme.txt
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/AMD/classroot.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/AMD/clsidleftover.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/AMD/driverfiles.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/AMD/driverfilesKMAFD.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/AMD/driverfilesKMPFD.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/AMD/interface.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/AMD/packages.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/AMD/services.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/INTEL/classroot.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/INTEL/clsidleftover.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/INTEL/driverfiles.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/INTEL/interface.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/INTEL/packages.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/INTEL/services.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Arabic.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Bulgarian.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Chinese (Simplified).xml
.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Chinese (Traditional).xml
.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Czech.xml
.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Danish.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Dutch.xml
.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/English.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Finnish.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/French.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/German.xml
.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Greek.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Hebrew.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Hungarian.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Italian.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Japanese.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Korean.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Macedonian (Latin).xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Persian.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Polish.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Portuguese.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/PortugueseBrazil.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Russian.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Serbian (Cyrilic).xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Serbian (Latin).xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Slovak.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Slovenian.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Spanish (Spain).xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Spanish.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Swedish.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Thai.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Turkish.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/Ukrainian.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Languages/_For translators - ReadMe.txt
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/classroot.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/clsidleftover.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/clsidleftoverGFE.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/driverfiles.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/gfedriverfiles.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/gfeservice.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/interface.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/interfaceGFE.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/nvbservice.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/packages.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/NVIDIA/services.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/REALTEK/classroot.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/REALTEK/clsidleftover.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/REALTEK/driverfiles.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/REALTEK/packages.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/REALTEK/services.cfg
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/1. DDU ( Use First )/DDU/Settings/Settings.xml
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Msi mode/MSI_util_v2.exe
.exe windows:4 windows x86 arch:x86

Password: sigma

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Z:\Software\mediafire\MSI_util\MSI_util\obj\Release\MSI_util_v2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Msi mode/Read First.txt
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Msi mode/msi mode.PNG
.png

Password: sigma
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/NVIDIA_Inspector Tweaks/Click this for help.txt
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/NVIDIA_Inspector Tweaks/SigmaServices.nip
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/NVIDIA_Inspector Tweaks/nvidiaProfileInspector.exe
.exe windows:4 windows x86 arch:x86

Password: sigma

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 563KB - Virtual size: 563KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Nvidia Control Panel/1. control panel settings.png
.png

Password: sigma
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Nvidia Control Panel/2. control panel settings.png
.png
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Nvidia Control Panel/3. control panel settings.png
.png
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Nvidia Control Panel/4. No Scaling.png
.png
Sigma Services Optimiser/Extra Optimisations/NVIDIA GPU/Nvidia Control Panel/5. physX.PNG
.png
Sigma Services Optimiser/SIGMA-FFFFFF.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.BOSSMAN
Size: - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.BOSSMAN
Size: 629KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: sigma

Password: sigma

Password: sigma

Password: sigma

Password: sigma

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

a2:43:2c:58:81:d6:5f:6a:71:46:96:3b:2c:43:f5:a4Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

51:d9:b9:21:47:40:7c:69:c3:f9:b8:11:4f:1e:f4:c9:01:55:ef:f9:25:ac:95:6c:36:e3:fb:21:08:a4:d6:c9Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 11KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

Password: sigma

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 26KB - Virtual size: 26KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: sigma

Password: sigma

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 563KB - Virtual size: 563KB

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 12B

Password: sigma

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: - Virtual size: 315KB

.BOSSMAN Size: - Virtual size: 159KB

.BOSSMAN Size: 629KB - Virtual size: 628KB

.rsrc Size: 1KB - Virtual size: 1KB

a2:43:2c:58:81:d6:5f:6a:71:46:96:3b:2c:43:f5:a4
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

51:d9:b9:21:47:40:7c:69:c3:f9:b8:11:4f:1e:f4:c9:01:55:ef:f9:25:ac:95:6c:36:e3:fb:21:08:a4:d6:c9
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 26KB - Virtual size: 26KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 563KB - Virtual size: 563KB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: - Virtual size: 315KB

.BOSSMAN
Size: - Virtual size: 159KB

.BOSSMAN
Size: 629KB - Virtual size: 628KB

.rsrc
Size: 1KB - Virtual size: 1KB