Wave[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Wave.rar
Size

221KB
MD5

b3a788d9bcfc32df7bf8a56c2f315ea7
SHA1

c0e48e3a8071707d58f3c576b6e6ba9dfc2e7115
SHA256

6d459161decb05905140215700642b818a7c40a67e0d7266a1b7b4927c011476
SHA512

06d026cbe4d20ccfd4271deb6c4e672845e7cef4d9722e5fbc84578f2fa37b7725b032ae29a3de7d3ca2a52cde1d417ccccc94d447f4dd5d6da52084043e1c56
SSDEEP

6144:0NBYKi+MqOh1SXNWyuuxv06DwIl5E4oo/hxDzMG0RzYAXCdPw5:0NBY8ESvu4jU7+3MG0R0kCdE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Wave.exe

Files

Wave.rar
.rar

Password: 123
Wave.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ