WEWFGHCS76[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WEWFGHCS76.exe
Size

96KB
MD5

2af2ce78ba8cd2c0b9e9bba7b9763e9f
SHA1

050691d3847dbd6b7ad361e3a50efd211d419992
SHA256

3a528dc862ba8b703b9e79a67d37a7db498b55119431a9843d177980e8eea4ad
SHA512

e25c8dafdcccce8c8779d31a7b176b83fd02e5e02269438a9c83c8c30c4c070c06bdae6974ca22c99fa680146423d76cc0b48413b461e9d0ba62bc69cc8bbdde
SSDEEP

1536:4Lgy3oSIF1lssHNO4yEU4i9n1FYM3CEF/7GmqbMY7usiY9hkF:4UcoS2lsCOB51b7GmCMY7pdkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WEWFGHCS76.exe

Files

WEWFGHCS76.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WEWFGHCS76.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ