iw3sp[.]exe | Triage

Sharing

General

Target

iw3sp.exe
Size

2.9MB
MD5

03964744f047ba2fc71f23faa898da82
SHA1

8ea173dfd99d0aad94f2501ad9de03acdf4df6b8
SHA256

e9f772527567422dcaa97991e1dc5971417dfbb1cca38c9f4c7eb8e3f40ea4ed
SHA512

00baacaafec24c0f342bdd3b37e49156058205017570d0a4721b4349e6c73258eef020eb6288fdb0c3c20a6e6ad8430027303bddc86509e15d32cd7a3b826ad0
SSDEEP

49152:cZlg1qL8tyarC/bVfMMMpAvbXN1lsNDMlF6U4z95nq+MsEkPtp5TOyBKoWPhN2Ck:cZlg1qL8tyKC/bVfMMMpAvbXN12DMlox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
iw3sp.exe

Files

iw3sp.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 485KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 26.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 33B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ