FurkUltra[.]exe | Triage

Sharing

General

Target

FurkUltra.exe
Size

938KB
MD5

4f37f8ff4fc4f82a9b30850a59949855
SHA1

be840c48dfba269067d173a9cf984fcf6229feda
SHA256

3c2e3a230571abc3f12582d7565d4d86cdc6c0fdd7282ff9716db27ae859416f
SHA512

8d17f115d813096cd0844722ad1dd245fa7a8203b5753a5aa7b5a484380954afc8abcb2c536552e68668bb69813a4d38f8341b6840ea2bc0bdccda2c794d00f7
SSDEEP

12288:NnRjabtvyU7RBv4XpnMQ9Nx3Ug+YL4UIHDPJKDbn2mFX1WpZOVXfTpU4n81yyUC:NnSUUbG9zE5YLv29K+mFX1WLkbpUPyV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FurkUltra.exe

Files

FurkUltra.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 919KB - Virtual size: 918KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ