Electron-Ware[.]exe | Triage

Sharing

General

Target

Electron-Ware.exe
Size

351KB
MD5

b0aeb3e6e6ce1a40d11ba024e23dce5d
SHA1

88c0d6c37e7a3ccf98591727de9f0d7a69837a05
SHA256

01c59f0ebdb9a8188c9e30338622ed80272bd3d2d58bccc9330a7de058973613
SHA512

bfcb9f3782dbc5584b19764ecf11f0a1e43aebe4a9d3131640dd474ddf1b6e5bfa01dee15b463810259d0daa64b56d7c23470d94e1a93e7f6fbdff04e732a9fc
SSDEEP

768:8gHKTnI7QsIuj0pBJk0xSvFw7VhUqv3g5rqlGyfnVSSl0++w+jDr561j0p6Jk0xL:YI0ZjEyhl0++w+jf56V01OPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Electron-Ware.exe

Files

Electron-Ware.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\minec\Documents\programming\Visual Studio Repos\Electron-Ware\obj\Debug\Electron-Ware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ