WhatsApp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WhatsApp.exe
Size

285KB
MD5

c6275f9cae8bd6652a4ad659cd38e59b
SHA1

9fed0c2ed44826da2ea476c0b093962b62eda248
SHA256

9e894c388142c49c19f52dd79a238f26e75fcd0be936fadbe61ac6b131e4d09e
SHA512

f6199c64d93fd44226c9cb14725fc604e72fb785229ea6cd76a61413ba03a1cc8dfd19eb875a67a101d0783359b8e68fe405c4d6a9ea48736efd41dbfa3bb3a1
SSDEEP

384:LpN7hLUj/Q/tBaxc8IcbUi+7AOU6HMf82utc2NQzXpQT34aOe9sRS872UVTSIEHd:VN7hLUjrooy34arSlay34abmn

Score

N/A

Malware Config

Signatures

Files

WhatsApp.exe
.exe windows x64

f12299573f995fc0c70b04fabebb3e6c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

whatsapp

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ