Watson[.]exe | Triage

Sharing

General

Target

Watson.exe
Size

22KB
MD5

9c444a9c1d75cbd07798110eeca1c3ce
SHA1

08ce73eb6ddfb0e421238aeefbb620e3c9006ac5
SHA256

c78a157fbea4f59374fa0b274ab267549a664023443da600524146a13eb8b214
SHA512

f50f53ff00b3f78ee7175e0118f5c45dfaf28745017fea09514e7131a49c6bc355a7113ef4ada2965a2426875b41641b20ed187503b9e0232bddc6239233c4ff
SSDEEP

384:qFqrot/2xEHvbR5eHvcLpDuYLUpO/mDblcQ7kaRl:LOvN5evy0jOmDRcQ7kaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Watson.exe

Files

Watson.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ