famlinkx_setup_v_2_9_1[.]exe | Triage

Resubmissions

11/05/2023, 18:46

230511-xewemshh66 7

11/05/2023, 18:36

230511-w9akzsbf9v 7

Sharing

General

Target

famlinkx_setup_v_2_9_1.exe
Size

3.4MB
MD5

31b6a66af004096b61fab8f093aeae74
SHA1

2f182c24ae8adfbb0f2a08f230f77af8d3648aac
SHA256

f6be660feb7b57ea83191de2ec74d9c034e973901557117923433cf1c9010f6b
SHA512

85ef8e39a1d177b6335447952f759f4abc4da9277f1c010fe274c87dfd5aa320ade673770210b7a6a0cab55367d1d1c29434cecfcd153579485b51512643cd97
SSDEEP

98304:X5o9W9rdI5NIk7UPnkxlYVQI/9E71fGqVlX3:eWNdI48U3V9FEccH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
famlinkx_setup_v_2_9_1.exe

Files

famlinkx_setup_v_2_9_1.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ