wonderdemo5sn115[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

wonderdemo5sn115.exe
Size

4.2MB
MD5

512377da1458289164a69f6bb11aa8e4
SHA1

ce865d1d6b3bd39912cacd26995182d1fd6c465e
SHA256

a7d41e2195153bf995282a55c8a302371026dc432766c4a15009ef83c6092ed8
SHA512

64193f82eeec88b8c42a8b91635837664575f067afe1cc165a79fa7c4ddb6f6e33a83cd78d5c68d8e89900dd541b459aa50f4c1f0f99cf158e31a60e894c44d3
SSDEEP

98304:zsa3xb44si0L28AWDEynGJvTRNtiw/QNeW9DUSzQPKLsEBwf:zsa3W4J0KwbnGdVixL+SQ7EBwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wonderdemo5sn115.exe

Files

wonderdemo5sn115.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ