foodcentov[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

foodcentov.exe
Size

363.0MB
MD5

bece2f1f3061bcc4b9c4bcdc01aab42b
SHA1

0e1bf2bbc6254f3f9150151ddd5b91cee773ac9d
SHA256

9d8f70321fee4c6cca09249d3944867ff28800f11f5c8095d9b2a6488de930bf
SHA512

7a238c062d01585b1f8738fa6951dd4a93e325129d1afcaaa9ee4f1261ecc6e75fd7097f77caded991abdab3836a6e8cb53ce74e578ea5cecc5adfef7e4b0da5
SSDEEP

12288:zUJ86jkLhxoT8dMe9jqGb/XPt290lNSm:zKjklxoTEMiqGb/lAy3

Score

1^/10

Malware Config

Signatures

Files

foodcentov.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ