Fluster[.]exe | Triage

Sharing

General

Target

Fluster.exe
Size

13KB
MD5

d1bdadd8694a5ea9c1088fac10257416
SHA1

155f8e396f5d60bcf2f76c696429e5f9c1835817
SHA256

3471f242247c7e374e20e32c0682c3227d78f25726d6c59546b116582a016f64
SHA512

0e84e400915dea46a6f00ffb1c9d888686b3eda30ef97ac8fddd23dfb5505bab3d70550eb65a2f52ef69916be3e24a854a55fd6f18a9fda51f31a3169d332896
SSDEEP

192:WU0Ymvv5i9jL3umTjQf4Zv5MlEf6pWNlnJ:WU0Ymn5i9L3zT8f4R5MBpMln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fluster.exe

Files

Fluster.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ