BiometriaWPF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BiometriaWPF.exe
Size

160KB
MD5

6a3ca60acfc46b445c6fbe11ba5030af
SHA1

de875e422e8f7589976ad73bf5e0a6bd7550ca9e
SHA256

5a51d4b237a1eff52b624f0510fc856432510dc077017347e5cec21523f51dbf
SHA512

2289ca01efa2adb2ef89f8d4926d5b6089cdc96bb25d60308a844fcb7e563380d6ec3d50ac55e0dd04e001745919ad2cc7ca2c079279467f579c87e7a5207ead
SSDEEP

3072:Hcr5eQ/zmOT00WlA7MVDG8OYp2W9sH4NYG8OYpmW9iUA:H7QrmW00WlA72hOYp2W9sH4NYhOYpmW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BiometriaWPF.exe

Files

BiometriaWPF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ