Overview

overview

7

Static

static

7

winexesvc.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    winexesvc.exe

  • Size

    25KB

  • MD5

    839757158f59f52c9d0c78ddeddc825b

  • SHA1

    c8f5280a6c2207eb28ad2e96c88ec6662ec55801

  • SHA256

    7ed2557715777ed50b69ee8691b50e355c10302774609a4d9d620ed787b1e611

  • SHA512

    9cb2e12b72feda8c599d5caf374376873d8b09cb672bf8982576dc731c58ff43a80eda62137e2d1750e18573b32544ccace2adf27e549828ced53497b52dae22

  • SSDEEP

    384:khTM2uzcfKAl8kD/XuTssGIi/59XU3QXXtuWA7yuQceX:khT5jKGdrtJ9aUfCyXc

Score
7/10

Malware Config

Signatures

  • Winexe tool used by Sofacy APT in several incidents 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • winexesvc.exe
    .exe windows:4 windows x64 arch:x64

    0250d7ef9bb853b5674d3bb3d93db12a


    Headers

    Imports

    Sections