WebCruiserWVS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WebCruiserWVS.exe
Size

406KB
MD5

f4a692d8412cc7fc7808744a2e6c337c
SHA1

26cb54ba1baf38ac66b4a43aa760d36410740975
SHA256

cf28b2bf8f455d048928fad69935ed408e4a175f51ebb60b3b6c3afb46155d0c
SHA512

1ec376fd9d1351d214619abc14e16ebf2de88f5a3b3a22e1131fcab6dbe5468c23d9f9354059062444875861a7b120299ac0be56fbe4b9658e1494cbb0b7da34
SSDEEP

6144:p9F+WPBX6zLa4jFvmZWgegDicdVniF+4glqt2tXKi:13BX6Ha4jxSjbZCglm21K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WebCruiserWVS.exe

Files

WebCruiserWVS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Data\U2\Program\WebCruiserWVS\WebCruiserWVS\obj\Release\WebCruiserWVS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ