NewNewWatch[.]exe | Triage

Sharing

General

Target

NewNewWatch.exe
Size

71KB
MD5

7615cc149441014b54dafe91a383c53a
SHA1

2d5cb93d78a02e5bf9e405363df3a8f9a5f6cc93
SHA256

0113a82f525091132d24bb83b705c7794a439f7146accd67254d47a13dc4cac2
SHA512

7856914dc4c82bac1858e1d77eea2f2f433d4ecadad6633d348de01086fa806f2bf7f70525ff8e831fbea119f9bb32d68b093e8143c9ca1b3f16641419e47523
SSDEEP

1536:cNSJ5R/XkDpTDyDbkaduGooo4lX22blOi8a6L:4SfdXqvyDbvlooocm2blOi8a2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NewNewWatch.exe

Files

NewNewWatch.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

g'I}J.
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ