WeMod-Setup[.]exe | Triage

Resubmissions

07/08/2024, 02:01

240807-cf12as1fma 7

07/08/2024, 01:58

240807-cd26ks1eqc 8

Sharing

General

Target

WeMod-Setup.exe
Size

141KB
MD5

fefe4a6c37a181e466d40e56de19cf44
SHA1

a3e07ac1006c0f078543d4b454ce8ccec7def38e
SHA256

541dd935bbc2d4861f7aba7633ec922314d3fc966e69d8991704ae0258df9ac9
SHA512

c78d2ae4d73df10326580488e28d148be760b9d246a7865eb219e619c48039bdc3141395effd3b6fa25fb708cae009b0cc1424214b3f377f6fbb0c5fd2b2c696
SSDEEP

3072:XGjm4ILlCI+4COHCyhaEtHZugr7t4ILlCI+4TOHHSTs:Xr+bwaEtHBHto

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WeMod-Setup.exe

Files

WeMod-Setup.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ