U8WebPool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

U8WebPool.exe
Size

29KB
MD5

0fd476c3b2b8c393ea542bd376b44f3f
SHA1

bdb7b017fc9bac7f6ddcaa72efac80fb0220811c
SHA256

092870c42cffd923735d1c36eebe589afd256d6c90fc6bdfd11f3cc7c0e6fab7
SHA512

ea4c4e4225f3673c0fc026cffe356949a1f7f338968bef066774de25ed299f1cb835936e6aee9de7d525be8630bcddc06ea725c1bd82a59d3b3cb51f634d2e86
SSDEEP

768:E1UEcxuuJXdNp+9sZnqcpstvfXn8BDTk:E1UEcxuuJXxyePmXMBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
U8WebPool.exe

Files

U8WebPool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ