1 Hit 1 Wonder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1 Hit 1 Wonder.exe
Size

4.4MB
MD5

58c67359e3797af9d89a2c1c1bde18b6
SHA1

f40af9d4ce76a32696ecc8ca116e489a1a98eb77
SHA256

ad4ff52deda88e74e641ea9d12dd04425624ad9c279a60c197ff52b9cd2cacea
SHA512

5eda519e5315ca85162cf2de7c6bea4f5576d168cac120872694e4a14ee18857e44c43d833d1c5945ac35b29775a66ad121bf81980976d7bf789ad757fb129a2
SSDEEP

98304:BBrgXLdpvOL+UnL1OLkcCeVULwsSqoOQHNUGC:BB0XTGqEogcCzCNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1 Hit 1 Wonder.exe

Files

1 Hit 1 Wonder.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

A:\Srcs\! yes\33\2\Wonder L\obj\x64\Release\1 Hit 1 Wonder.pdb

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ