Fraudware[.]Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Fraudware.Client.exe
Size

2.8MB
MD5

42866e0567b5888bfd0c3a7c8ed3d10e
SHA1

da9b484c270ce11fe4bd15445c9bbcbe9b22f602
SHA256

e6c9b2481c41d1185f4f484138f16c3704709f3303c8f8c70dbed36070340e43
SHA512

b73eb10247ce2ece05baddd819763bd94336beae70833f39a4dd6bec3dda78cda3d7956e8ad6588f2c98d366ae946b83acdc5275dc291421e2a8d75f698dd74e
SSDEEP

49152:Kdf4sI4ju4Q5tlhGwh5+EL9fCtCzMiEHHngsXOKvMM8C:9H5hbJfXzxkHngsXb

Score

1^/10

Malware Config

Signatures

Files

Fraudware.Client.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ