WH09876568009876-090[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WH09876568009876-090.exe
Size

392KB
MD5

9461de9c6f7866bc9a271182fd8ffa0e
SHA1

92feb28c312a2b418f10edc02f41d3afe0c6630d
SHA256

8965cf5a3d57c204d8a88c7697589ad0e7964b5fa125c50f5170748ce6896f82
SHA512

e577ccc3ebe2e2642ec3d0d76cc485128cb838b1b3ace89fb778acee7ac93b76c182a42552ffa9eaecf3e09b37625d6d15b511d6be4b2fc4016b98ab19618243
SSDEEP

6144:i0nvhIKD2SJM8DdRWRH7/cQ591fXvvqj1srPVGuIHXKzPwM8inrCaZq0G3Vy:Bv/D2SJa1fXvSj1srPIxKzPwDiBc0g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WH09876568009876-090.exe

Files

WH09876568009876-090.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ