DeleterWebhook[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeleterWebhook.exe
Size

142KB
MD5

1a09e5e6317705acb74de2ef2313e7bd
SHA1

2cc0651c7c7d9b4d85fa5480694f77990603a1d3
SHA256

37c88513a5bb21f21feca13dbd00cbeed21dadccd46a98b80f467fdade83d7f2
SHA512

b0a05ce7229bb745e04d124739f4a408487bba80da665f6a37cd3f1faa58ce58e6040e47e86dad189ca4a40210f812362e1d26948d54d4b7f8d3417ad197162b
SSDEEP

384:k6xaF6OeDXVcCQEZCnV8DkvwKwq6ujdc+u4xN/EVS3c9BJCuQkO+fAdc+u4xN/Es:uFqNCneobVk0bVkC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeleterWebhook.exe

Files

DeleterWebhook.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\files\project\DeleterWebhook\DeleterWebhook\obj\x64\Release\DeleterWebhook.pdb

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ