4776c583afca82ddd0fb0414a3a2386acecb5b4c7be3e562850c7723b018d2de | Triage

Sharing

General

Target

4776c583afca82ddd0fb0414a3a2386acecb5b4c7be3e562850c7723b018d2de
Size

685KB
MD5

50b9be167826255d7cbcd579859dfa36
SHA1

6f8eb9f0ac0927c9817d86c9971cf0f6b594fe7e
SHA256

4776c583afca82ddd0fb0414a3a2386acecb5b4c7be3e562850c7723b018d2de
SHA512

eb7a03894af93e69a1fb4a270c20d7f066107b62d8e65485c60f1439c704c4157a3fc09539eca3c67b05e2b49f36c0a58dc0070b8bce4b986ca0a590e71a5691
SSDEEP

12288:HpEx504bF0+s18j7gLY+yttn8PVfWPVIwLDVPprQ4+C3/s:JEw4b2dz+6VO1Vpk4J3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4776c583afca82ddd0fb0414a3a2386acecb5b4c7be3e562850c7723b018d2de

Files

4776c583afca82ddd0fb0414a3a2386acecb5b4c7be3e562850c7723b018d2de
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WZWP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 683KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ