HWID[.]exe | Triage™

General

Target
HWID.exe
Size 149KB
Sample231204-vfx9hsdb84
SHA256 0f8980228acd3d9dd7bc9208c13a68b244ee903212327e4d350a82010aa37993
MD5 2c1ec91ada25a4a34441200dd9773c2a
SHA1 80154f3f48a32866de9742bed33ebb907086125e
SHA512 0ff2d7b2ac069c8bb2b381333f896b2d09ee0c0ec23b1943c35ae758adc71bd34c69502fb22208b1bdb568bda8a908ed548f407010d09532664b02d83fde5b99
SSDEEP 3072:+r8dXu13UyQlK/UbZcZJuQCdM79xQbj8alpC5cgiTWMolM2i:+r8de1krcsbQuQpUQallgiboF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HWID.exe

File Explorer

HWID.exe

.exe 149KB

HWID.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0f8980228acd3d9dd7bc9208c13a68b244ee903212327e4d350a82010aa37993
MD5 2c1ec91ada25a4a34441200dd9773c2a
SHA1 80154f3f48a32866de9742bed33ebb907086125e
SHA512 0ff2d7b2ac069c8bb2b381333f896b2d09ee0c0ec23b1943c35ae758adc71bd34c69502fb22208b1bdb568bda8a908ed548f407010d09532664b02d83fde5b99
SSDEEP 3072:+r8dXu13UyQlK/UbZcZJuQCdM79xQbj8alpC5cgiTWMolM2i:+r8de1krcsbQuQpUQallgiboF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

158238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

HWID.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

HWID.exe

mscoree

dotnet