4ks woofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ks woofer.exe
Size

43KB
MD5

f53c8e53a9c7b5ec4a37e8ca27abe8c4
SHA1

e1c83b0ddf43bfb8a170476fd2370c8cd8dd1536
SHA256

e87ae62ccb405efe6b3548fe738868eac9b380c817284fad69b1214683996314
SHA512

4e90816d838686ea14ecca9072bb5d26b75145be5dea6d061a0bd6b061a12b51ff66dc4bf92c0cb29b12655c1af9a66015483c76fa0733117ae2639cfb694f00
SSDEEP

768:/qdG4T7mGSSnAdu6IMRoNbZwNoIsrrjTehXE9atgg1Yc3qeU:k/7mGSYseNb6NoIsHjqhXE9aZEeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ks woofer.exe

Files

4ks woofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\shany\OneDrive\Desktop\Folder\Woofer\obj\Release\Vex.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ