sysfuck[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sysfuck.exe
Size

1.2MB
MD5

25e64862e5bfe9e0f12c97ccc55199c2
SHA1

e590a51ace42436b43e30b2d74f6a1625540702d
SHA256

064224f9804249c07473aacc501b921a07674ab75e6e6f8bb461ba13ff02ca88
SHA512

3c5fef607a150d234701277342f5ceb8035c2e49977f97895ad63fcab178571d3e48f876cc8374e3500839753d18e576ff09a1cbba932adf90f6e143696d973d
SSDEEP

12288:7jj1wVK9Hw2/44c6auP6e513JDvzbbeAlpX9NFHU1bHe5:ASxcO51VL2AlpXLYLM

Score

1^/10

Malware Config

Signatures

Files

sysfuck.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ