Woofer_Train[.]exe | Triage

Resubmissions

29/06/2023, 07:39

230629-jhfayadc4s 9

29/06/2023, 07:36

230629-jfayfadc31 9

Sharing

Copy URL Twitter E-mail

General

Target

Woofer_Train.exe
Size

120KB
MD5

26671ebf96db402b7de4508ab2ff43c7
SHA1

f3c4dbb49296c44acc453d1cd9ea72136305f35c
SHA256

d57cee295925aa8ed64cefe17d8acba87b28bcbc78ead6794f96b1860be7d845
SHA512

9937b5883740f316d457f9863da67d5496a63699edb971ea4f1d559f6dd42e6ead6033071daba9fed23519b955c611b2caba52d641024209c096767a322ee9f7
SSDEEP

3072:Bblf6ocDNxiRG6QxHLuWdnEpgurpbhb8US0enTJ5POCsy:Bbl3cDNxiRGrjyFVbOM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Woofer_Train.exe

Files

Woofer_Train.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

Hi9 V
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

POoQCV
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ