woofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

woofer.exe
Size

74.5MB
MD5

0c44a5dab9073b8eb9276bcf756cd039
SHA1

147bc9609b985565b606d3dca5afbecd3539c2c9
SHA256

64633049f1143d8c566392774ae9a983410b592f7ba8cf273b075c6c4d8db94e
SHA512

df41478e5d7a4b0d9539cb1dd5380d33b4ae9d7db4c9227cb1ff17c54d1366f5afaa3b2a415e7d48455be4bde2ed1039ae9b445857ad2a99a53735c4f8bafd89
SSDEEP

1572864:7v4P6J/7P0hUszGay2N/b2YKVL/6Uat49EvO2Ub:7v4P+/7CRCayO/61Lg49

Score

N/A

Malware Config

Signatures

Files

woofer.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74.4MB - Virtual size: 74.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ