WaveInstaller [.]exe | Triage

Sharing

General

Target

WaveInstaller .exe
Size

7.8MB
MD5

ad2125aae822658c605d3c63d67bc83c
SHA1

c14963f80c27bc9f1c3a81d7cc62e1d07a000f91
SHA256

9d0e7fb49aa26d23d9926302f9488ca06d01b846d0f6f2f86d4fc0cae24066b0
SHA512

166170f6bec74bf1c2efc32f2d55567863b4d7c606d4abb49eae4a7f71ba8ae5d10cc60e8db79d3dffc436dcb08d444a56546a134aa03584c3043812a7625eaa
SSDEEP

196608:1s31xCtrqRm8PBfFzcUm7oqDMSc3BrCvKNDXeT:1i4rqRmcVNFm7DipCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WaveInstaller .exe

Files

WaveInstaller .exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ