KreYzeFreeTempWoofer[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KreYzeFreeTempWoofer.rar
Size

13KB
MD5

3299d4aae7cc76b3dbc3c932d86dc3c4
SHA1

ae69130e1a469d79e0d97644c48d98171d012b09
SHA256

17caf365ffb80fafa53b7865ae86c5573c24ce801a9c4a608040050046d9af1c
SHA512

047909af4abf45db1505691cec7dc54c4f829e8125b2d9c0c90e882988c4da89c4d8b1fa9e19ff2f99c2be31d43afd4937a8a4d467780f9f800fe2d0f2d8304d
SSDEEP

384:1YubzA5fivRpUys1R+apbqDk8oDJrY4/t6Bqh:1bvReyk+aooDJd6gh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KreYzeFreeTempWoofer/KreYzeFreeTempSpoofer.exe

Files

KreYzeFreeTempWoofer.rar
.rar
KreYzeFreeTempWoofer/KreYzeFreeTempSpoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KreYzeFreeTempWoofer/Tutorial.txt