WearHouse_10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WearHouse_10.exe
Size

8KB
MD5

d9137d8f4047226f21ab623d4f6c0fe8
SHA1

6f18777b9f2048f1371d4988662e0b3b2bb85c27
SHA256

b36aa07df9594212cedaf3dd53f4dc0175410a971964fd90fba9d9aad7662a2c
SHA512

9fe62a59748a291fd327cca6629fba2d8910683549b3afcfce5fe1dd31cb1c4225d3bd39940a2f321efb093a27d33510c99a433b6238b97f115259ad0b80783f
SSDEEP

192:9Lwlg5baCOPs0EFIxfVjhmB5LAq36MrKST:9kg5b76s0EEfVlmB5Lp6sKm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WearHouse_10.exe

Files

WearHouse_10.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\T480.TISS-LTP-00353\source\repos\WearHouse\WearHouse\obj\Release\WearHouse.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ