Optimizer V2[.]exe

Resubmissions

20/04/2026, 04:33

260420-e6v9vacz4z3

20/04/2026, 04:33

260420-e6nj1acz3y3

Sharing

Copy URL Twitter E-mail

General

Target
Optimizer V2.exe
Size 1.3MB
Sample260420-e6nj1acz3y
SHA256 859a4b59b2c2330ca2f3cdf0a970b62a09f6a8a93e3a8a23e31f7a83aaa2081d
MD5 544cbe8868cc577babab410d69b4f315
SHA1 a38dccf07d1d49f7f215f8e1d8f794346b073aa5
SHA512 da18cd4d7fe11bbcff5345923681cb607ca661050e02fc8e61638b468da5f5ba8638b635e274ab594c0b7811754f57a18915c7d7565ab1213592473cd7ff36f7
SSDEEP 24576:j6goCI7JOU2TBmyCkP1n3qRCzalaJndB6RMxMmABlNGwBcDDLxYOOAj:e7C8OU2I8dA4gEn2sLma
TLSH
T14B55BF57A3B401EDD1779038C693D713E772B84113209BCB27A049A96FA36F06E7BB91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Optimizer V2.exe

File Explorer

Optimizer V2.exe

.exe 1.3MB

Optimizer V2.exe

IMPHASH af4f608bf57e42782feda8cf7220d394
SHA256 859a4b59b2c2330ca2f3cdf0a970b62a09f6a8a93e3a8a23e31f7a83aaa2081d
MD5 544cbe8868cc577babab410d69b4f315
SHA1 a38dccf07d1d49f7f215f8e1d8f794346b073aa5
SHA512 da18cd4d7fe11bbcff5345923681cb607ca661050e02fc8e61638b468da5f5ba8638b635e274ab594c0b7811754f57a18915c7d7565ab1213592473cd7ff36f7
SSDEEP 24576:j6goCI7JOU2TBmyCkP1n3qRCzalaJndB6RMxMmABlNGwBcDDLxYOOAj:e7C8OU2I8dA4gEn2sLma
TLSH
T14B55BF57A3B401EDD1779038C693D713E772B84113209BCB27A049A96FA36F06E7BB91
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

771524

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\marti\Desktop\PCTweaker\examples\example_win32_directx11\ReleaseFinal7\example_win32_directx11.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

ntdll

VerSetConditionMask

kernel32

ReleaseSRWLockExclusive GetFileSizeEx CreateFileA WaitForMultipleObjects GlobalUnlock PeekNamedPipe ReadFile GetFileType GetStdHandle WaitForSingleObjectEx MoveFileExA GetTickCount AcquireSRWLockExclusive QueryPerformanceCounter GetLogicalDrives GetDriveTypeA QueryPerformanceFrequency SleepConditionVariableSRW GetCurrentThreadId WakeAllConditionVariable SetUnhandledExceptionFilter GetModuleHandleW GetSystemPowerStatus K32EnumProcessModules K32EnumProcesses K32GetModuleBaseNameA GetEnvironmentVariableA WaitForSingleObject GetTempPathA GetVersionExA CloseHandle GetSystemInfo GetWindowsDirectoryA GlobalMemoryStatusEx CreateProcessA GetDiskFreeSpaceExA OpenProcess DeleteFileA VerifyVersionInfoA GetSystemDirectoryA SleepEx LeaveCriticalSection EnterCriticalSection LocalFree FormatMessageA SetLastError CreateThread GetCurrentProcess Sleep DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError FreeLibrary GetModuleHandleA LoadLibraryA WideCharToMultiByte GlobalLock GlobalFree GlobalAlloc MultiByteToWideChar GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent OutputDebugStringW GetProcAddress

user32

CreateWindowExW GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow GetAsyncKeyState SetWindowLongA GetWindowLongA MoveWindow SetLayeredWindowAttributes TranslateMessage LoadIconA PeekMessageA DispatchMessageA UpdateWindow DestroyWindow GetKeyState LoadCursorA GetDC ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow SetCapture SetCursor GetClientRect DefWindowProcW SetClipboardData GetWindowRect PostQuitMessage IsWindowUnicode ReleaseCapture SetCursorPos ReleaseDC GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData EnumDisplayDevicesA MessageBoxA

gdi32

DeleteObject DeleteDC GetDIBits CreateCompatibleDC SelectObject CreateCompatibleBitmap BitBlt

advapi32

CryptCreateHash CryptGenRandom CryptGetHashParam CryptReleaseContext CryptAcquireContextA ConvertSidToStringSidA IsValidSid GetTokenInformation GetLengthSid CopySid OpenProcessToken CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt RegQueryValueExA RegOpenKeyExA RegCloseKey

shell32

ShellExecuteA

msvcp140

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ _Thrd_detach _Query_perf_counter _Cnd_do_broadcast_at_thread_exit ?id@?$ctype@D@std@@2V0locale@2@A ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Xbad_function_call@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Xbad_alloc@std@@YAXXZ ?_Throw_Cpp_error@std@@YAXH@Z ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ _Query_perf_frequency ?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

imm32

ImmSetCandidateWindow ImmGetContext ImmReleaseContext ImmSetCompositionWindow

dwmapi

DwmExtendFrameIntoClientArea

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

psapi

GetModuleInformation

wininet

HttpOpenRequestA InternetCloseHandle HttpSendRequestA InternetConnectA InternetOpenA

normaliz

IdnToAscii

wldap32

ord143 ord217 ord46 ord211 ord60 ord45 ord50 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord301 ord200

crypt32

CryptQueryObject CertGetNameStringA CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryA CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertFreeCertificateChain CertGetCertificateChain

ws2_32

WSAGetLastError recv send bind select connect getpeername getsockopt htons ntohs setsockopt getaddrinfo WSASetLastError WSAIoctl WSAStartup WSACleanup accept htonl listen ioctlsocket __WSAFDIsSet closesocket freeaddrinfo recvfrom sendto gethostname ntohl socket getsockname

rpcrt4

UuidCreate RpcStringFreeA UuidToStringA

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate strstr _CxxThrowException memchr memcmp memcpy __std_exception_copy memset strchr strrchr __current_exception __current_exception_context __C_specific_handler __std_exception_destroy memmove

api-ms-win-crt-stdio-l1-1-0

ungetc _fseeki64 setvbuf fgetpos _set_fmode __p__commode _get_stream_buffer_pointers _read fgetc _write _close fputc fopen fputs _lseeki64 _open ftell fsetpos __stdio_common_vsscanf fread fgets __stdio_common_vsprintf _wfopen fwrite feof __stdio_common_vfprintf fseek fclose fflush __acrt_iob_func

api-ms-win-crt-utility-l1-1-0

rand qsort

api-ms-win-crt-heap-l1-1-0

realloc malloc free calloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _register_thread_local_exe_atexit_callback _c_exit __p___argv __p___argc _cexit _wassert _getpid _crt_atexit exit _initterm_e _exit _beginthreadex _resetstkoflw _register_onexit_function _invalid_parameter_noinfo _initialize_onexit_table __sys_nerr _initterm strerror _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv system abort _errno _invalid_parameter_noinfo_noreturn terminate _set_app_type

api-ms-win-crt-string-l1-1-0

strpbrk strcmp strcpy_s strncmp strncpy isupper _strdup strcpy strcspn strspn strlen tolower

api-ms-win-crt-convert-l1-1-0

atoi strtoul strtoll strtod strtoull strtol

api-ms-win-crt-filesystem-l1-1-0

_lock_file _stat64 _access _unlock_file _fstat64 _unlink

api-ms-win-crt-time-l1-1-0

_time64 _gmtime64

api-ms-win-crt-locale-l1-1-0

_configthreadlocale localeconv

api-ms-win-crt-math-l1-1-0

ceilf _dclass __setusermatherr cosf fmodf logf sinf roundf sqrtf powf acosf