WBSYSTEM[.]exe | Triage

Sharing

General

Target

WBSYSTEM.exe
Size

58KB
MD5

7233f7eb82e65cc7e2ac358d90ce215b
SHA1

4e9f9b1a709bdadbb7504e41c350bb33c0403c96
SHA256

40a41c7dc29990faa23484e2f70da851f0f08a03f52ef285f4a6a32f20729a30
SHA512

0b3a062a3af40055c502490bb523f1c99b650cd53a871a3019f9dd2d667b8835d9b5a728b952dea0d5aaad84ff0b9be28d19c4e0b83ddf7982f64c869d521e34
SSDEEP

768:fSchYJjtTOMfnS2kcd/awGLFa9idMuV5EN+tTOMfnS2kcd/awG:Kcs5fnv5GLMuC0fnv5G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WBSYSTEM.exe

Files

WBSYSTEM.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ