Static task
static1
Behavioral task
behavioral1
Sample
UIExecutor9.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
UIExecutor9.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
UIExecutor5.rar
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
UIExecutor5.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
UIBypass/ui.eot
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
UIBypass/ui.eot
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
UIExecutor.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
UIExecutor.exe
Resource
win10v2004-20240802-en
General
-
Target
UIExecutor9.zip
-
Size
305KB
-
MD5
e454359922a9bf4f1b6b85cc6584cc30
-
SHA1
1ec4d76d3203ecaf3d0edadf6cd812e1214f4de2
-
SHA256
7f19fb229f714462a8e4f8e748d96826aa9a69f8a5be1337d9c3737a8e94db4f
-
SHA512
992e210c9c3da13d17f6ef108f4cc6afaa22c05b622ba9fbc9bba3aa2f0098fc045189dcde203ce668c5969cf0740d4653f9d2472c8035fd8c89676b7c13350c
-
SSDEEP
6144:d5NxCV1o7rzaylLhc736H74vrZNM6zHwyx386clmTwPQhpmU7vboPcx:Gw7ndylmMHwyx3lYms0X7vbCcx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/UIExecutor.exe
Files
-
UIExecutor9.zip.rar
Password: 2024
-
UIExecutor5.rar.rar
Password: 2024
-
UIBypass/ui.eot
-
UIExecutor.exe.exe windows:4 windows x86 arch:x86
Password: 2024
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
;,^*PK Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ