wmp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

wmp.exe
Size

1.2MB
MD5

386afc8550086eb6d06e4ccec370ccae
SHA1

7583d7494a2c6cc1459784701a5e041d2266d0e3
SHA256

52287141c376fa4a2de355d51d866874bfef6258c08d927bf2e66e085b7cb786
SHA512

411e46ab1833405aea01deefe44f99f078d7780ee584f855a1e9f0ba876a8c1733e4df5de6312b9e8281b77b1ac15e70ab982ebfa7db03167e127b58513de8ba
SSDEEP

24576:nyOPx3ITMvRFhRRbNWoCfkYSEH3OqtwIuXyTOG9yFoBOkA0:r3ITYbNbNWo4kSH3OqtwI8jaRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wmp.exe

Files

wmp.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

_)i4
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_)i4
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ