Wave[.]rar | Triage

Sharing

General

Target

Wave.rar
Size

1.9MB
MD5

11b42ba85912f44fc9e2230018fc02cb
SHA1

14f003be24179187a43001abc58789cf032a426e
SHA256

7c2cb5bdaa3ce8e709450cd0ccfe4e81310f6c85180c672377e0ff8ce25c6592
SHA512

fa3c1f6576b88900f5291a3549e0cdac76ac15f22205e7995578e427e5593ee30a63071d1ce8da8c9be8365793ccfea6cf02dc3dbd072191f9d78c2bb19b14b9
SSDEEP

49152:1pUD0SB9jlbfGtgKJc9jJ9yGmpPRliQhPeg33I:ED0ohfGadX9y5PLhbnI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Wave/WaveInstaller.exe

Files

Wave.rar
.rar
Wave/READ ME.txt
Wave/WaveInstaller.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\imaxi\Desktop\WaveInstaller\obj\Release\WaveInstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ