felfhiowqsmnnp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

felfhiowqsmnnp.exe
Size

87KB
MD5

079404e4e465f89f211b7f2a8565512c
SHA1

9506cf776e676841a7e48f20ab5f3f3992f830a3
SHA256

a2b8890197ea8808537307976d8deef50e56a330c385a43004f3ce095e2dbba7
SHA512

4404618b27479db1efa6ef076887c42a7e43ed30ccf65b7710fbb71b4e3a36ed115b2d4246cefbebbbaf7f711b6f3d87dff9c09cee52a49ce6c2075ebf4ce6af
SSDEEP

1536:ztNOrA3ORz0XugVA6o7lyt3vFgnMzkKxrCV9jMS7/1wKgaL7c:ztNOUYz0XwylvF4MzkKxrCV9jMkgCc

Score

1^/10

Malware Config

Signatures

Files

felfhiowqsmnnp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ