WIN CHANGER 2[.]3 (1)[.]exe | Triage

Sharing

General

Target

WIN CHANGER 2.3 (1).exe
Size

402.8MB
MD5

ac6f996ca7511978a0cb3595aa64ed64
SHA1

3d92d0feed1a705e520fe56762ae8c3aaf87e500
SHA256

8724dde766e041f9abefeba720eccd78f783545c4273681ba54c7133e0e809df
SHA512

b632ca45a3c30576d36b32374e6e4a6ce89fe7bb0d0a694ca8a5a3bb93d8d8c6a4f21738f39cfc4f0f02033e574f4018a9e5ba52ee575bf20758a74316f469ae
SSDEEP

6291456:BUVsZ8ANCCZtf0vsnlaje4V7U7w9g8DMbT1NOpMFJvWZT35eM/e0FdLR:B58ApZjn4BL9g4MF19R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WIN CHANGER 2.3 (1).exe

Files

WIN CHANGER 2.3 (1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

k\<uBU
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 401.1MB - Virtual size: 401.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

<JWmThEC
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ