DiskWatch[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DiskWatch.exe
Size

44KB
MD5

1f9d10af4d6704cfca9f028792528109
SHA1

7b8ff740812cf7100cff006d1e4e233128ede699
SHA256

1bc5745b0d1b5c6c38358bd582cee095170855f85b0f484301b36fb32854208c
SHA512

8e71f0425ab36a4887f70b1eef98c5040556b6690e589b30f098265371969ebf42e053b403ca8e2b985153af7412fc0d7a7e9d6e2e9ed8ed3f13b643b738806d
SSDEEP

768:6DheDhf9aDGZzzD8t2VdPlQaGoViPEZwGDh:6D4Dh4aZzZlGoaEZwGD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DiskWatch.exe

Files

DiskWatch.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ