WMS_PDA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WMS_PDA.exe
Size

426KB
MD5

b3234edfdad478c1007bf85ea3b9ba92
SHA1

131b3e26ffb471a9f3379b33fb4e526efa4b0288
SHA256

bf77c775459ef4ef6c33cd4dea2d65fd30500430ef01dda1f0fe6e04c292eb41
SHA512

65fd921b975b9223c8146a33585beff802193dc9d224d06c8c8c71dc672cc171be33260d3b3818011c8ff01f26cf9b4ad477858f7e120be44bd28787be77f534
SSDEEP

3072:BpFVqsnqh4IIIIIImImIlnFEcjCNIIeEImIhhd4SzVTYYuw:vFVqP0C8+YB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WMS_PDA.exe

Files

WMS_PDA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ