wow[.]exe | Triage™

General

Target
wow.exe
Size 8KB
Sample260928-p7wbcawsbw
SHA256 2cd0c64e1eb74313c6a9b020e171da7761206e5a71b2b824f10e96ec64ebac46
MD5 15018e0bac3b066d9c0e15cfd2f05f06
SHA1 8da55a73f9b45327c1146512941b2af7ccf72ce6
SHA512 a75e20b408bf8e2ad3fe4edf945ddf248e60c95d9a1e61fc05d54389d470a9789ea04ab070605e645597e710adcfd4d06a6e72740e1cae37ff1cada3ee912f8c
SSDEEP 192:8BVjzv4ebxE8Hei08pDMbFUEBGFaNJhLkwcud2DH9VwGfctlnO:8BVf4ebxrc8ASEAaNJawcudoD7Ui
TLSH
T175F16D5696590F8CC09E127B1AAF794F0524D11EDDC9C6ABEFE8303BAC83F941D28365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wow.exe

SHA256 2cd0c64e1eb74313c6a9b020e171da7761206e5a71b2b824f10e96ec64ebac46
MD5 15018e0bac3b066d9c0e15cfd2f05f06
SHA1 8da55a73f9b45327c1146512941b2af7ccf72ce6
SHA512 a75e20b408bf8e2ad3fe4edf945ddf248e60c95d9a1e61fc05d54389d470a9789ea04ab070605e645597e710adcfd4d06a6e72740e1cae37ff1cada3ee912f8c
SSDEEP 192:8BVjzv4ebxE8Hei08pDMbFUEBGFaNJhLkwcud2DH9VwGfctlnO:8BVf4ebxrc8ASEAaNJawcudoD7Ui
TLSH
T175F16D5696590F8CC09E127B1AAF794F0524D11EDDC9C6ABEFE8303BAC83F941D28365
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

32528

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths