Zwle Perm[.]exe | Triage

Sharing

General

Target

Zwle Perm.exe
Size

1.1MB
MD5

14dde64d9fdbdf9f8683fed92a6b2a27
SHA1

c2f87e85f04c0144e525bab16b4b32797f799a01
SHA256

cdb43f8a2658acde1762b3247736e58b129323816e3e5a3b5b0a39e48c94966d
SHA512

44fada7626f395abd3eed0dd8119aa779ab72402ebd2585ba1b3aad5dd0174c1fc08d0cc95b06f98dfb70a8518ed98bd58b6382166130cec7e3c88b8922582e7
SSDEEP

24576:B3qCr4khqE3qCr4khqarZ3qCr4khqErW3qCr4khqqg:B3Ekd3EkDZ3Ek9W3Ek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zwle Perm.exe

Files

Zwle Perm.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Kiddy\Downloads\Zwle #Comeback\SRCS\Zwle PERM Src - Copy\kache perm\obj\Release\Zwle Perm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ