Huawei External[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Huawei External.exe
Size

5.6MB
MD5

6bb341b3a2f9ce6f38f998082400ff5b
SHA1

12ffe804ac302f017a1dbedb6a3fcf42a11feffe
SHA256

7ea435962ce257adbe6148e9a75a1449122969ff88b288ee5d77afbec64c7f65
SHA512

98bafa9072252c5864c0aa61729914dedb660a82b6b78a4d4b8be7583ec2dda2c102b1c1da61ec9e2add9e9e32043c8414fe73f52afe070803890540550b9eb3
SSDEEP

98304:YQsZnsJRekJ/qAZ9oR+9/m/GGIbPFK48uoJTCbA8nTdY4Q8hEUu:5s1sJtkn+9/UEbNK402UyTdY4QiE1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Huawei External.exe

Files

Huawei External.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Dg4
Size: - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.?Iv
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qZ{
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ