WagasService1003[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WagasService1003.exe
Size

120KB
MD5

95a43780b4efc35452287caea2e44b47
SHA1

31ef7d96042cae37317897f4c0c4da981cd5306c
SHA256

068f239f3a1182799fb3ab91389f959d3b2eefe0f25b6def5e8cdcc869f34a40
SHA512

23a5cf05c8cf68cba23dc7e064bc6323fecee976bf1bb49f5913bee64caef9f57fe4530699600139aff7ce24cb04281372ea4e9436922cc30b4dc5f06aa2af2e
SSDEEP

3072:c8frsfqQ77LMpEr0E3VXRvTIPM4u2qowDjnYQe:cp/L4EgwVXR7IeowDjnYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WagasService1003.exe

Files

WagasService1003.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ