Overview

overview

7

Static

static

7

winexesvc.exe

windows10-1703-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    winexesvc.exe

  • Size

    27KB

  • MD5

    45d842da37b7c39bf932924a4640cf9a

  • SHA1

    14486b1ccf9ccc07d23e6c7be3a3fe498d6732fa

  • SHA256

    99d158cb9890c51637cb995dbdbeb91e890f8867d0d4d3c4e181f7d774861fe4

  • SHA512

    0a3c1f68b6b424d56964ecae88a450aff78dc34608e85470d7ce58782357754a01e362c4ad9df89a6a679d6e0d53da77df67dcb01dfe64f4bc9c30b640fa852e

  • SSDEEP

    384:FvNGT8ezJ5+VViLriO1gbP5I6B+P6/N7mNoW5KE83iNKLr60nmyuQcej:FvS8ezJ5CViviO1u+SdKOjP60nmyXc

Score
7/10

Malware Config

Signatures

  • Winexe tool used by Sofacy APT in several incidents 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • winexesvc.exe
    .exe windows:4 windows x64 arch:x64

    03de7552640f03c644f177a094a3d6a8


    Headers

    Imports

    Sections