HWID Changer v6[.]0[.]exe | Triage

Sharing

General

Target

HWID Changer v6.0.exe
Size

174KB
MD5

593b86059dd73bff4fed5016969ed099
SHA1

b53c1464c82a3696eda8546fb9bf8397317512b2
SHA256

e9f0257d19a52f78bbd265995261eca5e52d27210f7b796cbccc668ee15d218e
SHA512

74f35408685b6a277a52921e319326d6f98ec9ef16671f6a5a0f5664624196083fb61eacad96b76bc4f6824ae31bd268b07882246600f0ff2c2ec60a1e2f9dd1
SSDEEP

3072:hUnHiKSO/i2UnHiKSO/ioPIwlaZqUnHiKSO/is:+HN/itHN/ioAwmHN/is

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HWID Changer v6.0.exe

Files

HWID Changer v6.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\giovanni\Desktop\Projecte\VB Projecte\HWID Changer\HWID Changer v4.0\HWID Changer v4.0\obj\x86\Debug\HWID Changer v6.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ