WaveWindows[.]exe | Triage

Sharing

General

Target

WaveWindows.exe
Size

8.0MB
MD5

b8631bbd78d3935042e47b672c19ccc3
SHA1

cd0ea137f1544a31d2a62aaed157486dce3ecebe
SHA256

9cfda541d595dc20a55df5422001dfb58debd401df3abff21b1eee8ede28451c
SHA512

0c51d6247e39f7851538a5916b24972e845abfe429f0abdc7b532f654b4afe73dc6e1936f1b062da63bfc90273d3cbc297bf6c802e615f3711d0f180c070aa26
SSDEEP

196608:0G5rY45g686QOL+rSYG6rBQ5I1NkSI4A/zLWYnI2RtCKkVJI55mTS4:0erY4G686QOSrSYXNkSALPvz5IH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WaveWindows.exe

Files

WaveWindows.exe
.exe windows:4 windows x86 arch:x86

Password: s

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\Desktop\WaveWindows\obj\Release\WaveWindows.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ