SoftWare[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SoftWare.exe
Size

758KB
MD5

0462ee257d052e3ee8a64f9ecb7f5f2f
SHA1

fcaf1010cff904c8e8b46cec2ddd6b0f1fd6aad4
SHA256

0abd9055702e5708497f5cd1032c9f57f5c4b2a5acb60309ef9e605213b1d41b
SHA512

4d9b5dbba521300d1b994754967224b448cd654430388f6993765b6aed7e3454801f798f97e4e997422b4ab060b2746824a240acf2ff8bae0990e5d206730bce
SSDEEP

12288:+i87P1HvYxCi3F2umVkNqnzPmYEF/lHFe0XM5+iPq30zViKBa05R:I7P1PYx13oBtzMTFrXM5+H30zsKBa0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SoftWare.exe

Files

SoftWare.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 755KB - Virtual size: 755KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ