WuWaRuV2[.]exe | Triage

Sharing

General

Target

WuWaRuV2.exe
Size

9.4MB
MD5

d49304afc157354093b9028ef00357a9
SHA1

eb9a6b7a466cd95b4c773a6ca9c04f5547517083
SHA256

e1de8d77e6dd9bd1cc7b8dfc1f9de0b1d08ca1575da949cc8e4e69c47a5a0faa
SHA512

af5b4a8f80bea6e67eae4da557742d12dee3419e8da5ecca6f0c3a11dc28bf630ad9f35a3174f369e7fb1ad982ee5952d207b7617c1c8035d8c1c9de2fe47219
SSDEEP

196608:RzKRdmVL81+APaHB+NNM/rjvEDTOuK6m0VN8iNISSkSIWpWFnp:ZXJwI/rjM5Xm0XWkSDpY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WuWaRuV2.exe

Files

WuWaRuV2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\fvsbc\Desktop\WuWa RU\WuWaRu\WuWaRu\obj\Debug\WuWaRu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.3MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ