Shiver[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shiver.exe
Size

542KB
MD5

812de86fc229ab0ff8ad771a7b1dcc0b
SHA1

95c34d358a20785d49ab33202ade0696c61cc59d
SHA256

c099e249df0ee3ecf0f41df8bf9c58ee10ed91eaba4cc463386c0e5007f02794
SHA512

418729ecf1540760627ec8ddea7cabee1d5f2d984058c47d506b594b31629398801543ad1a6d34716673ffa93f2229fb6ec2f149888ef628be66ce4b080594c2
SSDEEP

6144:bnrgGnl1+IJmbANErP6oYqQORHkIVaA5N+685j4k7mnfX3OpGHkIVa:bnwbGuP6oTpkIX6bpanv3UEkI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shiver.exe

Files

Shiver.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\whatw\Documents\GitHub\Random-Stuff\LiquidLaunchpad\LiquidLaunchpad\LiquidLaunchpad\obj\x64\Release\Shiver Launchpad.pdb

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ