SoftWare(2)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SoftWare(2).exe
Size

660KB
MD5

638491bb86f894f30536bac097cd964c
SHA1

fd62b738c34f9e0abcc44170a86eac03e9341fee
SHA256

2a125bc6dcc8e9b8bb4e1555946aa3f9126d3df3bfafff88bc668aa091f1094f
SHA512

000e2ebb760ac0e9cce4241e0d84ea223b9d18ac77fac661e21537787b9c037e76e246d05d616e139deabd2080056ba04d0cf1b2d5e07ee6e0a82b5d23dfc093
SSDEEP

12288:4Mp/0VWm26SLFOTn0AmTFtk1n8Mqssxv0IFIVvpjJUea/bD0Wifnw+TKzY+7Vu/7:t6W6SLMTn0ACtZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SoftWare(2).exe

Files

SoftWare(2).exe
.exe windows:4 windows x86 arch:x86

Password: 8866

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 657KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ