wave[.]4[.]3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

wave.4.3.exe
Size

5.5MB
MD5

8b9afc4bc2b0f5af0800e4c79a1f3fee
SHA1

8d5442c896a1c83dbb1e26c3603fd03c25787477
SHA256

65f4d2064ce3a9fefeae99585316011512032e42c921e7829987f74b319cc4b5
SHA512

6c485634caf903b44caf5803683b50bed7da1fecaf301a06988a88e7217ab1640c613da2cc89d8574817f615a1a00d90ddac68df0808f84130ca882898927935
SSDEEP

98304:seRBLWpYNjKbwFkPieT0hzXDIIOsA6hwINfiNBrOlxhFzF+FVhylLDX3P2YO:3R4pZbwFkPieWDPHhJNfuMlxP4FVhyx7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wave.4.3.exe

Files

wave.4.3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ