awd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

awd.exe
Size

105KB
MD5

a3077036cb3c4f9d425f6d4f8579351d
SHA1

2a780db1e300cba97ea8ea5249f77deef99016ed
SHA256

17acbe24b6961351cbe9f041f0acf9130b6cd6d3c6039fff311aa04c6b9f5028
SHA512

c819f9ec2dfdb878f8f6a15d0c7b045497d395cb00555b08d80d01a4dfda47b7b47d960fb985fa9954199ef5dc690b9150d478b06a46e9c3ed2f15d716a9106b
SSDEEP

3072:Nmj1cAXEz8aH4nzrgaAKaEzEWf7l5cvNhnIw:Y5LUF43gatu/I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
awd.exe

Files

awd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ