Wgfgsadwhezuih[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Wgfgsadwhezuih.exe
Size

816KB
MD5

d0d4bf07341ea6a0ba0eb6452b9d9553
SHA1

401c57666e38906f0265665ec20debbed6e520f3
SHA256

a7a6e2c9ad03dd090858ddc054751485681b77bd24397ad8e87218faa940f4a8
SHA512

53d885ac89ebb24235d649baa994820f8f9e9781165447c14dcd6b551e6e7fd770f06b7e9a449dfb9fe1ed8fd05513cd7b6035260a8189a0af0e7ba6d012eb3f
SSDEEP

12288:DN91ty1dhMo3EPTUAtGco4Cz096jU9qS/GkXDW2QbqcK6RhdBMueRVP/dU:DN9vjo3EPI4o8EkXDC+c5uueLd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Wgfgsadwhezuih.exe

Files

Wgfgsadwhezuih.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 497KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ