WitherTorch[.]Windows[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WitherTorch.Windows.exe
Size

1.5MB
MD5

1197304163873233cb86639a56fed5e0
SHA1

d1bca6f3deb3134c92a384a0924c5b3a62cb2b48
SHA256

ea564bbbad0e4527e38837c850aa07bcbf6284e94eb35ae2bb77e472cac2ab6e
SHA512

af08f7696ba49652a6c9c0851080b8146f02f0186af884117afc0f67104eb508f99f418a6cd8d3634b41a68172f7e6138925403fd3d82daff35410d526e2e957
SSDEEP

24576:Us79fw+Jwz/S/6c0KK37yviUIaOwIHl2y2pcY2a75uRFrW:U89w+W7SCfKK37LRwO9s5J7A

Score

N/A

Malware Config

Signatures

Files

WitherTorch.Windows.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ