wowies[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

wowies.exe
Size

9KB
MD5

660a2abf2958e0f676dd4e0ff54f8d8c
SHA1

922e83185b568e5d8c6845a7c09d7be81fa8c1be
SHA256

195498cd349375302f3d31cf9a68f4d71165f8bd7c7a28f07c0f5eeb455483fa
SHA512

66ae91c92893899b9a26c9aecb85d73dfe48acd288d235d39831ccfb326c2a8695ecca22385b505c60d7170e827e869a2e855166e47a75e7c9203130c60a0fd3
SSDEEP

192:eF3U+uyFt0yLswi+8ckq6FfB9KZs8GzV4NNPiRUeO:eWSU+g59KZfiVeNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wowies.exe

Files

wowies.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\kylum\source\repos\Fortnite skin unlocker with aimbot\Fortnite skin unlocker with aimbot\obj\Debug\Fortnite skin unlocker with aimbot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ