Zeus_Free_Temp_Woofer[.]exe | Triage

Sharing

General

Target

Zeus_Free_Temp_Woofer.exe
Size

408KB
MD5

70ddc19be0097f71988f34ae8e3b11c8
SHA1

0e4dea24acbf4e0186104de0ad1693df57e5859b
SHA256

7f2b9bec74c0b62c49a55d2bcf0717d86ab30904960029a81bbe587aeb46a824
SHA512

2dbef51a5f5dfe63ef50da663f46424df3e9487270472c5cedcaa9285f54e3fca6bba4a16bebae3dfcce4d7a04a9b4025a3cd0dd1bfaa79c0649e38081b6237c
SSDEEP

6144:v+vfxra/naVEeVpcFccUEZenKnHD+vfxra/naVEeVpcFccUEZenKnHU+:2vfxrC5WEZeBvfxrC5WEZe6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zeus_Free_Temp_Woofer.exe

Files

Zeus_Free_Temp_Woofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Ggsof\source\repos\Zeus Free Woofer\Zeus Free Woofer\obj\Release\Zeus Free Woofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ