FSCapture[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FSCapture.exe
Size

2.8MB
MD5

c32a578c152215522efcc20754a9a1c6
SHA1

e7081e330f9f4fbf900049e7b664849ac14525b5
SHA256

be8397ebcf9975ea4ec9404bcf71d10b312ac37da60372cbb3ca909d5fcf37d9
SHA512

eaf529fe81fdc7903370b3ea8410178c5132fa36c3fa1fd693c1a2f8184fcef0fd51dec843eda97db17063498eae0d6cb2359fad246a8fd188658ba95a6e020b
SSDEEP

49152:sXWVIX2Ni97EdDr168kZli9BCDw+cvdVJxLhRTn3c2yn1S4GZjb9BoOn:J9gADrWliBeQXLhRTnMHg4GZtBo

Score

1^/10

Malware Config

Signatures

Files

FSCapture.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 1.4MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE