flex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

flex.exe
Size

177KB
MD5

6173270ae09661c4f3b12f051eb8a884
SHA1

c44024b9fefbfddc8ae66820ca3c051bc88cb24c
SHA256

4e3c9b0160985631e9387f8134f519acc085485286a029b1642dc89daf786f52
SHA512

a48831a121768c58cb904182da253979977f4e2b66e37256c7fa75e005f2bcce17e57c9be2872a7ef84bf6eb121701a2e27ba55e7263afd0f30998f61aa7f654
SSDEEP

3072:cyMEnj6aiObgRwDEWcyNcVuGtydZJCiPjfK1qf+T5UZ:FjNihRw27ydZJzTHfs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
flex.exe

Files

flex.exe
.exe windows:4 windows x86

561f80e93e6cb009b5078d7e184b2236

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
GetVersion
GetLastError
WriteFile
SetFilePointer
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
CloseHandle
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
ReadFile
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
CreateFileA
GetProcAddress
LoadLibraryA
SetEndOfFile
DeleteFileA

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ