what[.]exe | Triage

Resubmissions

19/02/2024, 17:07

240219-vm34cahe82 3

19/02/2024, 17:01

240219-vjrwxahd69 3

Sharing

Copy URL Twitter E-mail

General

Target

what.exe
Size

6KB
MD5

29b2d799a2e6ed40c9f8bb518a17f23d
SHA1

87c02f192ee1ec18b43d3498ebdea80e8141b82c
SHA256

c9c51807ac0737b47530e5f2d32896f255e266de489b103499aea37a5baafe5d
SHA512

276d726d2ed3e50cbbe509bfa76e535252c6946e1070c5fcd326a2eebd94bc7b9762261dee7113b0a044322832b789e8ab0e152b3bf6cd0c8760e3e0b15b763e
SSDEEP

48:6g62LywVpJmGUFffNQ7M6CXJAJ8pZaQFAZLZZw4obiOulZsGmqlQ2GSfbNtm:R1LyoUJNyCzppOZLgtbswG/zNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
what.exe

Files

what.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ