falloutw[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

falloutw.exe
Size

1.2MB
MD5

c32ae6f10573f654380702f40b4bf8db
SHA1

ec3e4d5ce4af5e6fbd494c92fca558089b2dedc1
SHA256

bba5eee2a715c155a576de09d487073b072a5bcece529008ba51b51b0f192e63
SHA512

01fb269e347fffe05c18262624789596a2a4485dc83c2f061aa3cf9b0fac1ec44dfad1cf66a5736fbb0226e969da7c17719f12e965f98bbfe48dfe326694e6ff
SSDEEP

24576:jM6owyBsxUnUiVsRwsjkQmaJOUzv/6NErajCV:o6nvxbj8Y/9x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
falloutw.exe

Files

falloutw.exe
.exe windows:1 windows x86

146a027a22cc562928cf1cb5e4d86836

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

gdi32

GetStockObject

user32

CallNextHookEx
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetAsyncKeyState
GetKeyState
GetMessageA
GetSystemMetrics
GetUpdateRect
LoadCursorA
LoadIconA
MessageBoxA
PeekMessageA
RegisterClassA
SetCursor
SetFocus
SetWindowTextA
SetWindowsHookExA
ShowCursor
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
GetActiveWindow
wsprintfA

winmm

timeGetTime
timeKillEvent
timeSetEvent

kernel32

CloseHandle
CreateMutexA
CreateProcessA
FreeLibrary
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetProcAddress
GetTickCount
GetVersionExA
LoadLibraryA
VirtualProtect
WaitForSingleObject
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
DosDateTimeToFileTime
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetDiskFreeSpaceA
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetTickCount
GetTimeZoneInformation
GetVersion
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
ReadConsoleInputA
ReadFile
ReleaseMutex
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEvent
SetFilePointer
SetStdHandle
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteConsoleA
WriteFile

Sections

BEGTEXT
Size: 836KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DGROUP
Size: 307KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1.4MB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 59KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

146a027a22cc562928cf1cb5e4d86836

Headers

File Characteristics

Imports

gdi32

user32

winmm

kernel32

Sections

BEGTEXT Size: 836KB - Virtual size:

DGROUP Size: 307KB - Virtual size:

.bss Size: 1.4MB - Virtual size:

.idata Size: 3KB - Virtual size:

.reloc Size: 59KB - Virtual size:

.rsrc Size: 9KB - Virtual size:

BEGTEXT
Size: 836KB - Virtual size:

DGROUP
Size: 307KB - Virtual size:

.bss
Size: 1.4MB - Virtual size:

.idata
Size: 3KB - Virtual size:

.reloc
Size: 59KB - Virtual size:

.rsrc
Size: 9KB - Virtual size: