PCOptimizer_new[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
PCOptimizer_new.exe
Size 1.1MB
Sample261024-ramn2svtft
SHA256 bd70fe8ff6aa698eab779002edb43f4dbe088a99d1f3dee4eca6d8e1eaa8a12b
MD5 ddc44c1d03b441d8b0728dc7aea91128
SHA1 c30f4758ecc9cd1369266914fc886e7276256c83
SHA512 a7cc48bac866464cb5809db3c8f0a17f9da38cdd1d51522cba57d7961ec72ebef64a5322454e11b457e49ee6c672147e2a6e0cfd34f1c2761935c204432f782b
SSDEEP 24576:yyufcdqpiXAHbcHW/1LoQmQIs2aicnf9PiWaW:yyufcdGiQ+guhQIs2Dcnf
TLSH
T1A6455B06A3E841BCF0BAD378D9A59917E73278490B7096DF039005695FB37D09EBAB13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PCOptimizer_new.exe

File Explorer

PCOptimizer_new.exe

.exe 1.1MB

PCOptimizer_new.exe

IMPHASH e37ca1a8cb8102945feba3b862579435
SHA256 bd70fe8ff6aa698eab779002edb43f4dbe088a99d1f3dee4eca6d8e1eaa8a12b
MD5 ddc44c1d03b441d8b0728dc7aea91128
SHA1 c30f4758ecc9cd1369266914fc886e7276256c83
SHA512 a7cc48bac866464cb5809db3c8f0a17f9da38cdd1d51522cba57d7961ec72ebef64a5322454e11b457e49ee6c672147e2a6e0cfd34f1c2761935c204432f782b
SSDEEP 24576:yyufcdqpiXAHbcHW/1LoQmQIs2aicnf9PiWaW:yyufcdGiQ+guhQIs2Dcnf
TLSH
T1A6455B06A3E841BCF0BAD378D9A59917E73278490B7096DF039005695FB37D09EBAB13
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

836360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

user32

PeekMessageW DefWindowProcW DispatchMessageW PostMessageW TranslateMessage PostQuitMessage SetProcessDPIAware EnumDisplayMonitors GetMonitorInfoW MonitorFromWindow SetWindowLongPtrW SetWindowLongW GetWindowLongW WindowFromPoint ScreenToClient ClientToScreen GetCursorPos SetCursor UnregisterClassW SetCursorPos AdjustWindowRectEx GetClientRect GetPropA SetPropA ReleaseDC GetDC SetForegroundWindow GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState SetFocus BringWindowToTop IsIconic SetLayeredWindowAttributes IsChild GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SystemParametersInfoW LoadCursorW MessageBoxW UpdateWindow SetWindowPos ShowWindow DestroyWindow CreateWindowExW RegisterClassExW

gdi32

GetDeviceCaps

shell32

ShellExecuteW

ole32

CoInitializeEx CoSetProxyBlanket CoCreateInstance CoUninitialize

oleaut32

VariantClear VariantInit SysFreeString SysAllocString

advapi32

GetUserNameW RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegGetValueW AllocateAndInitializeSid CheckTokenMembership RegDeleteKeyValueW RegDeleteTreeW QueryServiceConfigW OpenServiceW OpenSCManagerW CloseServiceHandle ChangeServiceConfigW RegSetKeyValueW FreeSid

iphlpapi

GetAdaptersAddresses

msvcp140

_Cnd_signal _Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z _Mtx_unlock _Cnd_broadcast _Thrd_id _Thrd_join ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z _Mtx_lock _Cnd_wait

kernel32

FormatMessageW LocalFree GetModuleFileNameW GetLocalTime CreateProcessW GetExitCodeProcess TerminateProcess WaitForSingleObject PeekNamedPipe CreatePipe SetHandleInformation GetFileAttributesW CreateDirectoryW GetEnvironmentVariableW SystemTimeToFileTime FileTimeToSystemTime SetLastError GetLastError FindClose MoveFileExW GetLocaleInfoA LoadLibraryA GetModuleHandleA QueryPerformanceFrequency QueryPerformanceCounter VerSetConditionMask WideCharToMultiByte MultiByteToWideChar GlobalFree GlobalLock GlobalUnlock GlobalAlloc OutputDebugStringA FindFirstFileW FindNextFileW RemoveDirectoryW SetFileAttributesW GetCurrentProcessId WriteFile DeleteFileW GetActiveProcessorCount GetSystemPowerStatus GetComputerNameW GetTickCount64 GlobalMemoryStatusEx GetWindowsDirectoryW DeviceIoControl GetDiskFreeSpaceExW LoadLibraryW GetTempPathW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentProcess GetProcAddress FileTimeToLocalFileTime IsDBCSLeadByte GetModuleHandleW GetSystemTimes CloseHandle ReadFile GetFileSizeEx CreateFileW FreeLibrary Sleep

imm32

ImmSetCompositionWindow ImmReleaseContext ImmSetCandidateWindow ImmGetContext

vcruntime140

_CxxThrowException __current_exception_context __current_exception __C_specific_handler strchr memchr __std_terminate memset memmove __std_exception_copy __std_exception_destroy memcpy memcmp

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_wassert _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _invoke_watson _set_app_type _seh_filter_exe exit _exit terminate _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback _beginthreadex __p___argc _crt_atexit _c_exit _cexit __p___argv _initterm_e

api-ms-win-crt-stdio-l1-1-0

__p__commode __stdio_common_vswprintf_s __acrt_iob_func _set_fmode __stdio_common_vsscanf __stdio_common_vsprintf __stdio_common_vfprintf fwrite ftell fseek fread fflush fclose _wfopen __stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

towlower wcscpy_s tolower wcslen iswspace strcmp strncmp strlen strncpy

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode free _callnewh

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64

api-ms-win-crt-math-l1-1-0

__setusermatherr acosf sinf sqrtf fmodf cosf ceilf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale