HttpSrv4WX_CY[.]exe | Triage

Sharing

General

Target

HttpSrv4WX_CY.exe
Size

1.2MB
MD5

59dc9632e92c0001095f44425c6878d1
SHA1

e0c48ef3842134f0d6c739e62ce66ef0e467010f
SHA256

3d0e65f50507037a6288b4610a2a8d43c47ad8d0c54221bd8fb77367befda397
SHA512

57b3f7fc30537bbcf7bee4e973eca4ce81170fbc01e8d19b3b9ae01a09bb93f3cfa3d237ff373a5a41260cc2fbc7f7d839a145a2cef2be774524157e2433193f
SSDEEP

12288:o1UNEFiZjcrd9c3YyHJOw88ATlJzJC26ONcsD11oJ5hjLAS2EfU9iEqC:pCImrd9Rij4b6kvR1WnXH2x0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HttpSrv4WX_CY.exe

Files

HttpSrv4WX_CY.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 959KB - Virtual size: 959KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ