Ware[.]exe | Triage

Sharing

General

Target

Ware.exe
Size

8.9MB
MD5

755b101c8635e836d08efbfc29a5b686
SHA1

a7b5c0e50e3a6b3daae2d3104a46911dc330444e
SHA256

f44881027b94a8f9fe161d0a97dadc4aca8e31fb80dc8a2d2d3ae22e41ee76e3
SHA512

6640e9ad0b24c377f29f24e14a13738aabd7ffe337eec4717620d06a22a8976f9b70fd3172a9aa675ec834ebe6ebb2f7c22a79035c2db0b54d4aee8783df2e5f
SSDEEP

196608:lWPiutDWLOw7MjBy29Nh60hpF029bL9SxgjSpcjm9K:lWPiuQLU91r6Ep3jSxOb6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ware.exe

Files

Ware.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ