Kwserhekrq[.]exe | Triage

Sharing

General

Target

Kwserhekrq.exe
Size

8KB
MD5

4d720699e817806609ee380f5bca2b7c
SHA1

d296840d38048e5c2ad0fbd6dc552f9082bdceec
SHA256

e58db2a0ff5965c97eeb52a3342e5a4ec06ff9d6beafbd7007e14368c5af64a4
SHA512

ae5e58dfa4a528d4beae2eb4633fd9c8d2212ead7fdc834e8586c929cdd3584bce589e1615f6c23023a1f9a2e75a467c3c16707d331789c56ac2bb699e0ecc79
SSDEEP

192:NXOKhwWfX31ZGq4/VPB/gh8RkfiH/6pNi:BJZfHjGhL/ghvauN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Kwserhekrq.exe

Files

Kwserhekrq.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ