wfyoot[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

wfyoot.exe
Size

345.1MB
MD5

50b9bc9334b95d222620c7e52abd2753
SHA1

8390d9c66a05cbceeda148fde913d021d50c042f
SHA256

adef9e0c5cfde0858e39f4ebee20235e160018ee6ff83c42019073fbaeac2d49
SHA512

fc91bb04b0c6b248bdd5d63c7d648cf44bf5d6aa1ab7929b305110f74e008248b4a2bd4870bb7b0b82f1b6f16432726a3bd0d5a32133bbd7fa1b5972565883fc
SSDEEP

49152:zBrj7HTnLWBUtH0DDqgo+a2zGisDXKLR0up3:zl7HrLWBUtH0DDQMzGtW3

Score

N/A

Malware Config

Signatures

Files

wfyoot.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ