WagasService1002[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WagasService1002.exe
Size

120KB
MD5

736f560796e43665a92b6a997e8b2a01
SHA1

9333d97326e17db47250731b74406828d3a1b8b0
SHA256

e1d175953a5947914623a9afc16aa115d9624b7818e9eddc3539b8c0d72f709d
SHA512

e0378d0959596283c8cd6d7cd5e60fe8940a2efcfff14f77ff6095ee507d07fa9e4c9d0b858b8306a82ab27b9ac0ee154a46d375c273be2f3ccf8dce79fdc4a2
SSDEEP

3072:KbYyLRNkzT/K8O8E3VXRvTIPp4u2qowDOPYQv:K0Ti8O8wVXR7IHowDOPYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WagasService1002.exe

Files

WagasService1002.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ