WASender[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WASender.exe
Size

2.3MB
MD5

3a973002d7237768bd15f7af39aa1836
SHA1

d90cde2589e5df0ffd0b1c3ddf42ecd52a7e39a3
SHA256

9b2a612f7f4ff0362fd63f44072647fc9084a8f3a690aaa1bc583420f39cbcd2
SHA512

9d3e4842f2810db25993c03cd8b36dc9b3f2b83cd04bbec9246f32d93104dc610cddc7411585c95cd6bfd86863b97e10af53c82a0a352d9468620a8ee4a0e098
SSDEEP

24576:ZUEJ+tama/ana7a3WnW3WXWLcWnPWi3Wu2++QWH/oZNMgytdIUDhZHWA:CEJdTya+3WnW3WXWoWP1WjHW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WASender.exe

Files

WASender.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\ProjectFiles\WASender\CodeCanyon\CodeHere\WASender\obj\Debug\WASender.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ