FNGSWUpdate[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FNGSWUpdate.exe
Size

4.5MB
MD5

2d84b8055f91aa32ae0542b46a37d78d
SHA1

5908eed68be66a7c381efb9913de95301d4ee557
SHA256

638b4c6ccf91221b838bd7d900a465386f015ac1c5df251a1925702f249de2f2
SHA512

e7d3ce4ccbed5c6e4280513039381b4ecb3e9d43f0f4ed7290643454b4caf7a7b62428bcd4935fe0ad91fa7e0bff7c37486222c9bea0c239756624074c00d3d1
SSDEEP

98304:yBOG9Ny1GBOG9Ny1/vdP2N9orSTGUZoIOs8M:eXkIXkhdPSar5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FNGSWUpdate.exe

Files

FNGSWUpdate.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ