fcbf20c26c4fcdd4e9dfcc9e745386ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcbf20c26c4fcdd4e9dfcc9e745386ac
Size

113KB
MD5

fcbf20c26c4fcdd4e9dfcc9e745386ac
SHA1

3f5b535030be1fb4ec2911e64046dcacc02f461e
SHA256

cb70d18309304220d9515dc1281856fc910cb7fcc7d220acd2abfbb5c41b450b
SHA512

6839626cd68fba5334550836187094768a62ebc6bc7b138132fe1543063d04112705779f5bf18a3e1202a0a768c3f9c1edacaf810b63648d64cb121bed33be33
SSDEEP

3072:R+vXy/sp4SCJoSE4FS2Hn/Egu/5+Mxi88wP:R+844SqFDI/5fi8pP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcbf20c26c4fcdd4e9dfcc9e745386ac

Files

fcbf20c26c4fcdd4e9dfcc9e745386ac
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 103KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE