wealthzx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

wealthzx.exe
Size

722KB
MD5

bec11ca3a3a72fbb4b93e078f03b2e78
SHA1

7f58e12d01bf9e350a512644617d6d916a31b478
SHA256

d5268264e03035ae08616679859a12d0652285022884342333b068c226a209a5
SHA512

9fedd543abb7203dffbc90f0dc0cbc8e5e6ac723270dbc2358ca68127842103fd68a7e8cb262553120d92dce919f22fd2366ef6bc5ef2159874fe85a9ea4870c
SSDEEP

12288:QtTzd7BR6wTEvcjRnhgxw7jNqIHqPMj4cV0lFbeBD0jKjE0jQ8C:QtTzpBAvSjgqfsIHq89VyF2JxjQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wealthzx.exe

Files

wealthzx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 719KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ