Ware[.]exe | Triage

Sharing

General

Target

Ware.exe
Size

1.6MB
MD5

1df83930b2f63952658e225517485b00
SHA1

204ac8667e475e25e3892384adec97328b2d5e16
SHA256

6b723db6eeb3b7690a2723375c4561d4cedb59b5caeea92007b40f03a607572d
SHA512

218340b032a9c67158db7cf2a8714b13a87725b19aa125074df444071504c4eb6488c203a5464a552b5a2077a90d8c0ae29e98b04657f9d871db8971f1f5c22d
SSDEEP

49152:q5MreET43UcvLpKnVAn7nM5Zrs5xO3YqQ:aXSaVvFKnO7ksDOI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ware.exe

Files

Ware.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ