Resubmissions
22-02-2024 18:35
240222-w8j32aeb82 3Static task
static1
General
-
Target
WeMod-Setup.exe
-
Size
141KB
-
MD5
b7a8c7f363ac58aa95c8c2090e1b87a7
-
SHA1
10f01392b18643b522a07750f23b4b3a1fae8225
-
SHA256
cf050a532236fb9762be5db9a81414d6e1befebc0e6a0cb80778cb295acb86bb
-
SHA512
9409ed3cca63deb5fb5513bad4e86e23adbe47e2ea890dc322fe4a7e90b29bbfe343361f21530748d5ba3c329e93684bf7b136a8c00f41cf08ef5c0025a9cd56
-
SSDEEP
3072:Bojm4ILlCI+4COHCyhaEtHZkOpk97oc4ILlCI+4TOHHSafx:Bd+bwaEtHLhiHt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WeMod-Setup.exe
Files
-
WeMod-Setup.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ