silberwoo[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

silberwoo.exe
Size

35KB
MD5

afbd4f85bfb8fbbafea1704b03cc085a
SHA1

e76936012a845a637f92767c717850eb6a1d6908
SHA256

e393cc7b08781f3e395831393b812a25d62fa3d6283ecdcc3e8904818ccd1f42
SHA512

0352dc8c68b0bd19d8761c153cda3f8d66739faace7716e5f9278924f613058d3a0aaa6a0d6da773edd3f95643a7822a25707383bae9b805355256cb857818dc
SSDEEP

768:c4ajv+NFluD0G63iCA+F6P/9na3phlAu1vGqXZi:8jv+xuD0LAn39a3phaQE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
silberwoo.exe

Files

silberwoo.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ