REVISE FDA[.]rar | Triage

Sharing

General

Target

REVISE FDA.rar
Size

841KB
MD5

20f822e40593992232e192a2a256ad79
SHA1

5cbd7f4faf18310b2053fdc234d59df317d84e0d
SHA256

9e3ecfb2c7f80db6c03213052bc912023fde84965f84c8881cc791096dd0a055
SHA512

acdefbf79288a90c3b231400070c507c28fffd0a5be3bf82b71802017e4d6c74aef0a200c68ee77732efc29862d99596b2a0326194a28152d6d7d368f5f39ec0
SSDEEP

12288:tkoOPyyMktT7jxQ/WNDvuuRH2f4cXFsFRtqN9cRURNHqyHO5y8IU+X7w3ce7XzE7:Iio7jTj9HdcXuFRt1Rib8t+c3fz9Wtd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/REVISE FDA.exe

Files

REVISE FDA.rar
.rar
REVISE FDA.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 923KB - Virtual size: 923KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ