fclor32_2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fclor32_2.exe
Size

28KB
MD5

9d84139910df9a018085a2b387774d40
SHA1

1c38b361b004b11b5ec4190125091708d3fecb6b
SHA256

a4eff444881f704ef72e403697244bc3533372cd7e911b2680c25591e9cef206
SHA512

c3d3b8a5090f2a0266831e72f57b3fb96ce2e0a23f69f2d98bd0c03616766257b9f3bc6025435498b66fbb52b9389cab475f534846e79996f20074ccbeaca6c3
SSDEEP

192:eDbmd+QWxfwpI7zcZ15TE6a2sVjFXQ5n59EQyRCV:evueSKAZ15wJpVe8zCV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fclor32_2.exe

Files

fclor32_2.exe
.exe windows x86

b9d35eb034bec90c640705df0be9f765

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
ExitProcess
LocalAlloc
VirtualAlloc
VirtualFree

user32

LoadStringA

crypt32

CryptStringToBinaryA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ