Dryswpzby[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dryswpzby.exe
Size

453KB
MD5

06f7ea93f9795f468bb5d6061046d744
SHA1

ead474c554c1b7ccabc5a959c2bf999e2ff507e6
SHA256

fb9c41960ea195480341cfdf13deee325e5c563064f21acf1c89e488ee4ea841
SHA512

4424ae2046d269bee6fbeeb61f21af8eb23fdb39dd370cb213279d5c64513a4eb668ba1803e4a9903410a89a4e4e99622b0000aee877d697cd3185cecdcdb0c0
SSDEEP

12288:trREZVELIFokfm5NSHswPPx9ikS76859RAd8:9REZVELIFo0HswPPx91S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dryswpzby.exe

Files

Dryswpzby.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 449KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ