Behavioral task
behavioral1
Sample
optimizer.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
optimizer.exe
Resource
win10v2004-20241007-en
General
-
Target
optimizer.exe
-
Size
12.9MB
-
MD5
5fe862a2ce144cab18f8f0d293b4d00d
-
SHA1
51629e9c06fac3797e9209b0c72b653615280218
-
SHA256
4dd36b00b17dd316a92d8ec6a8536b5c3e3ff5b740b5a29ede2ac5fa9513011a
-
SHA512
0812f72e38a59f7bc97e397e6227d7e2c3511325ac093b4feb4cd1decb94d689ab846afc16279daf7485c1c97ede8c506b1fa0fa8a9bedeb1f0b3797ac3c14bb
-
SSDEEP
393216:qt12AWdqwuwq3Obs2ClzbjdQJlSwF3MnG3xl5Ze03r2W673+H:0R8tuwq3ObRqzXdQn3MGxZri3O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource optimizer.exe
Files
-
optimizer.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
upx.pyc