WaveWindows[.]exe | Triage

Sharing

General

Target

WaveWindows.exe
Size

1.6MB
MD5

8d37409343d73132d2fe721e6a12fef7
SHA1

fc4f957334eb013c79abcfbb550ec8b6b2881b32
SHA256

e7c98a0985b4ebbbcf02b851aff360fcee7f01c79680ef2efeac6f1406ec540e
SHA512

54e38f4240f4f84e0ff898718f724373a203a140aa4c9c557065b33c9afd1748fb090590b5a237256290e6f1b458ae234d69addbee5b45a3d437305213295d8d
SSDEEP

49152:qlG5rkZME6QP2EY5UR9SR/bI6Q54Lb/kprXinbTi:KG5rYMxh5UR9obI6QOLDkprXinS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WaveWindows.exe

Files

WaveWindows.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ