D4RKWARE+WOOFER+1[.]3V[.]exe | Triage

Sharing

General

Target

D4RKWARE+WOOFER+1.3V.exe
Size

2.5MB
MD5

e3ecfc13d055ae4712e5d740b4f2e55e
SHA1

119c0ef88b550ca8ff59210e2620fc9c5e00862b
SHA256

477dce069519b9a063105e3a15de8094eaf788c9e7af71aa8966f25650db91ec
SHA512

26e19176fba4ad57b4981c8e5b5cdd16f6cbb2843c59849c8eb8cefde1c621d1c3204c99b9008b889476beda0a2f993999000cc71a9bbf3b2ee8123acef8a3d8
SSDEEP

49152:9A9nAO3L5HHabE3pJOd2yEVJeMVT4fToqjipTReh2nLj8EW9TJqj+z:9RCL5HHao3e29QCd+aj+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
D4RKWARE+WOOFER+1.3V.exe

Files

D4RKWARE+WOOFER+1.3V.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ