080523-FM 06-01 WSF[.]exe | Triage

Sharing

General

Target

080523-FM 06-01 WSF.exe
Size

17KB
MD5

854de49345ef9ea31add64f80e3f7e6f
SHA1

ab7fc3b8b54915e75631f4c8c64cd6ace6cb0fbc
SHA256

524ed20611d14e1ace66e1b6661bc4518496e375c928238f9c9b9156fc8cebc8
SHA512

79aee913e15f6fdb30b584103a2c949542686770714fd3a41bd6cf2bb9a1ab10d1490d231a56f5841a9c92caa40cfe2a910760aa269edf253da010eef52e41cb
SSDEEP

384:CRxClkRJehmfeCrwZfnQT4e1edzFuRmk/caPs0VqvZTV:SGhmfe2/T0MMOqRV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080523-FM 06-01 WSF.exe

Files

080523-FM 06-01 WSF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ