AutoWB_2110022[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AutoWB_2110022.exe
Size

390KB
MD5

092b335ea39766efbb551b5a4c05a8d7
SHA1

0eae7a1bc0a42330c78d290874e25773032367cc
SHA256

131218747d0420c5daecb17f0538524ded4c8d0b158bb2357eb8c2c8c924fa7b
SHA512

aa4a445103edd2017c10ed7f41893848a9daced0fcb917448be2cf43498075b8542282254679cd5ddaabb919689be28c46dac4df1ea38a813232ec71fb011a19
SSDEEP

6144:lBhmz4j5wWkEcL2eNYnhQNj2osmoJK998QYCIIBx:lBhflwWTeNYhQh2j9IBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AutoWB_2110022.exe

Files

AutoWB_2110022.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ