FNGLICCONFIG[.]exe | Triage

Sharing

General

Target

FNGLICCONFIG.exe
Size

506KB
MD5

02a09a891713476f54d8213cb80ef13a
SHA1

3912664a323c02ee0bb634809b2d38fea37f6c7a
SHA256

54e8f8bdf63f3fca973201268104e2522e8387893834e6e5f7d0d33ca4dcf987
SHA512

f6f0da77df335e373111243cfcd8a415de4134a7b6d09703081f12e4d246502bd1ba29773344ae08a5c4f10459a7a66aea65410c60b011adaa5b5cae1859cc41
SSDEEP

3072:ogKfezcTq9Vc1Kgxb1r8xE5oTR0eF4IbvJbuWMflVAjBbGLguxrc0E:oO/c1Kgp1UVF4IbxbuWsVAMJX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FNGLICCONFIG.exe

Files

FNGLICCONFIG.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 479KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ