fucuamav[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fucuamav.exe
Size

4.0MB
MD5

a0d58058921e4492136448b472c78705
SHA1

9693b049f019741f5eab0f79e3f05b652f3e7122
SHA256

d03e9db222d028a1d753d836235cda24535a0e1a8fb8e6e31e0e5e76487ac59e
SHA512

a8c001d566cc589c7f90b1e428d5c518a447c8bffd271c6005404b39aa2945cc23b0fcaf1ccb93114d36c03713d28a1cd28584a719edb0eaf89d205297a5c27a
SSDEEP

49152:PIBbo0WIgmjljFtXCdRLRBcJd+KaGxHIkMNqzP56O8lZ7qXUqi9uEAJBSjhA:ABbBWIgWljGxRB/LLTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fucuamav.exe

Files

fucuamav.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ