FNATS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FNATS.exe
Size

72.4MB
MD5

f2ccf776670497acf999ed63a468f3b6
SHA1

e3ccae9814a584dcd2c0973125a5a8ba39c12573
SHA256

fe3809c0c8637a87da37f8330ab0e50546753cc90a312b59e6f00831dd835717
SHA512

7434a4a98052b1ee0a319ab5467696e14cf03647ac8c908dca18e7f2429d9e6e97ec5e194df6da7c3407d0bce05f8a6e169c87a7e963ce02bc547fe56175a1c3
SSDEEP

1572864:BR8ui+69khi3YMOjcCncKlnux1Brj79Xfbrwj87YO:BRpijkhCYNcKlnuPBrvBjrd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FNATS.exe

Files

FNATS.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ