WiperSiSharp[.]exe | Triage

Sharing

General

Target

WiperSiSharp.exe
Size

8KB
MD5

55db2ebc39a562f2981db8ca2d286865
SHA1

013d960b1621ebed07c2e113a207713481303bcb
SHA256

babe0a27555fad8374cbcd5bf628a8f6a54bd2b998c67e57f7506c0c3a11f7ef
SHA512

d46d7f6d9bb8050605ee23c2bb0df4a2a431b7cfda083a3f2483ec40439a68edc34eb3a8183898f20dd782b179a6fe37a863c998e13f2c685c0bc291f1ed2626
SSDEEP

96:yHDRbQ1Pdp0JSMl39/ZBsiHJ6A+6UC+IzK1+/mjVwtAFytzNt:yHBQv6JSMnD7+IzK1+/mjVwTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WiperSiSharp.exe

Files

WiperSiSharp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Kowfsun\Desktop\idk\Wiper\WiperSiSharp\WiperSiSharp\obj\Debug\WiperSiSharp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ