FBLA Coding[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FBLA Coding.exe
Size

27KB
MD5

880352be366061644dbc673f470d12c6
SHA1

ac3c2db4500e7b7d38408ba78c85824694b793cd
SHA256

bfd22f6db269279e2967f81e585541ef04124b2466150b7e3060cabbbac108e1
SHA512

6506a0d2598f37a4d8f15e317ae29d7653c708d8a2f3bbda3a0ac40ca1b97b5a354cf3671bb5aefac55aa9d5ef5e8e3067590311ba0c2a540f4b45b67bd93059
SSDEEP

768:O0U2m87l55lllllUmdlXKRG2Ze7WcmJcHGHMHNSHaBtYcF7Vc6K:OX8QmrIxe7WLJcbrx7Vcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FBLA Coding.exe

Files

FBLA Coding.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ