FemBoyKit GayManLoverRootKit[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FemBoyKit GayManLoverRootKit.exe
Size

18KB
MD5

8062bd0c949d501838f30cf4c9b2827d
SHA1

fe0f7d43fd02c11ec75e2dfa99afd93a5e0ab220
SHA256

004af5eddce731b362efc8500edfef5a218579c03b1ce6e0627cbbcb8635027b
SHA512

fa4cfa18afffcc839a5b1d6a4b59c789c0d407f7124be47b4294fb4c5c22d1d97dcd49f450b3f702563c9fd5e0716fc4025ec24f14a1c2425892b2a66ec5c12e
SSDEEP

192:ocR8DnegyuQ51Zp0lL2Xoh6uOSYcadP4HPcBQ:ZSZyuOmliXoXJadSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FemBoyKit GayManLoverRootKit.exe

Files

FemBoyKit GayManLoverRootKit.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ