reWASD730-9159[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

reWASD730-9159.exe
Size

21.5MB
MD5

d9287fa6fbbc65674145bb11551e1222
SHA1

b49b599c7cc2c8531a2ceb256b80acb940deb3dc
SHA256

d8a238605ec865d18aad81ff0767ae411d82aabff734831086bddd8cd661f944
SHA512

ad612c0e0c71394e239e674520e76f599cea7d95dced111db342bacdcccebc92e91d0cdf7b0a19ec93f23870ceb5b2c8e9e08f75fb07f833833cf476d88d1e4b
SSDEEP

393216:Vd+TvJ9A8hHKw00DVdv9UrNjc6ui3MUG3iS95hzo8FrZoKI/EN2YH7JLUSgg+eVG:ZgSrNjnzW795hs+SKI/9oJgSZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
reWASD730-9159.exe

Files

reWASD730-9159.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30.6MB - Virtual size: 30.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ