FA002[.]exe | Triage

Sharing

General

Target

FA002.exe
Size

1.4MB
MD5

4ca5a34884534a5751b8e59d41cecdcb
SHA1

5e4a25fdaecbd655bc056438b8e2a27d773ad8ef
SHA256

78a123cbb6dae6d4bb09a82e7c9551e385aee0f5eb8f9a4ff0de8f2fc4dbdd22
SHA512

4d259a92821caaba26e8ffabfb0abab1787c9b5b9f8f0c850a3279bec5e62bc23733ecb9de008bdcc581f9368501771f5d88e7f2628ba3f5b7b7f777e5c96ccf
SSDEEP

24576:NxdzBAGMq38k5CtXu/hX2hpQlmwgqyN3t2HnF2890ErDfpBws:Nl7Ou6pTAytt2HF2yfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FA002.exe

Files

FA002.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 538KB - Virtual size: 537KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ