DOCUMENTS AWB 72944348673[.]exe | Triage

Sharing

General

Target

DOCUMENTS AWB 72944348673.exe
Size

255KB
MD5

4c1a99eda6c67c2ec6ddbfeb166bb581
SHA1

a79b4f3fa29da6cefd34475b3a2bdb6d715fa600
SHA256

750821c931e05dd447353b3351efe66922397a040c363cbfa7c19a8f94ebf411
SHA512

9bcc918f741f08b976d87dceff572f97836c672ab7ba0916798a298fb607255ff63601b12e349fed2406c2b1d106203e59f6d2d2e856baff58a4a92c50aff7db
SSDEEP

6144:8wkNp5zosmcpI5orAY8V9toiSbOF+MCUPrxAZBV6KshGjld:8wk750s1C68RoiSKTnr+Myv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DOCUMENTS AWB 72944348673.exe

Files

DOCUMENTS AWB 72944348673.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\CryptoObfuscator_Output\WWASZXCW443.pdb

Sections

.text
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ