AutoWB_210827[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AutoWB_210827.exe
Size

423KB
MD5

159dda873821f5e2845cc3a13053f24a
SHA1

ddd85b2e94ac4370508034c98751de69e0e2b8bc
SHA256

808f9616fa4726b3d6001985c2fac3714182621ed0af32426e7598511d937889
SHA512

3d5fe4e8c87d5f65fc2847437dd6977c0d40398598faf55860441561f96129f7f31359be0b1d29cc248c7d699846dd50469ed673d46298bdf7b2e8689b3d1b53
SSDEEP

6144:M+I0jGOkpLN/wLKSXiwpcUq5BmoJO99H+6CwBx:n9jHkj/Y6wpcDtiBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AutoWB_210827.exe

Files

AutoWB_210827.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ