WinToolkit_1[.]7[.]0[.]16[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WinToolkit_1.7.0.16.7z
Size

4.8MB
MD5

d141203b72df0804c89c11ed779a1445
SHA1

ed32e8d0473903c72a826517f627a2e18601b06c
SHA256

c58fd44c63f143e83efa275cd996c1138a31d7980be70170f33699042ec444be
SHA512

8803dbef933f9936923238685b10c113b65ce184926bcb5d562eca1404d0eb1f154a3e534b6383f88cb1bf70b986876d218d8ac4fdff316aa70d5e2864b25363
SSDEEP

98304:04AEbtAmKh1Ewk1umsxF13xwO/ZIsyOc0xVOH4mlK0OFrxF:0aOmKhxLm6GOAOc8wNEF3

Score

1^/10

Malware Config

Signatures

Files

WinToolkit_1.7.0.16.7z
.7z
WinToolkit.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17.5MB - Virtual size: 17.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ