DWFREE[.]exe | Triage

Resubmissions

16/06/2023, 23:30

230616-3g43fshc52 10

16/06/2023, 23:26

230616-3e6s9sgh4w 10

Sharing

General

Target

DWFREE.exe
Size

395KB
MD5

4afe42ab8c0c110a385ffe06c01427aa
SHA1

67ff48466384eec17243071f5b1ea0cb3bc480dd
SHA256

8e513431cd6ca61bea01241d3af1404b30580b59f89d1dd2475713de4ece6821
SHA512

8d7f51fe12d6f9943a7c6ad09a2bef92ccd0e6dc2aaa53a69dfa5385a1919def17780be0c1b3570726902eb69cd9b8e2dc265c25fc555ada0d03bd9292763647
SSDEEP

6144:YuwEibeVaXYmZ8ZBrjE96Gk7CX8z/GlL6Vfu/Ryk+6glTp/5nd8bgUR8CS:bwENQB8ZpjDGku8ToL6VfOyTH5nd8DS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DWFREE.exe

Files

DWFREE.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

JO@$10<[
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

88085800
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ