FBLA Coding[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FBLA Coding.zip
Size

11KB
MD5

e2918591962b5c96f63a817c4e151e65
SHA1

711769944d932d14e5a064420d09847f7579e54e
SHA256

eab331c2f473a6a0bc58be9802c42aa004e54e9427110decad89d4454c42bc81
SHA512

959e9cd85a8c4ae37b193c7efcb4dd563ac728b64e2ec79cdc30f7e800bcbfcc3191a128080525f607d6ce1a1f1f59bb695071f752afd0380c85387685edf034
SSDEEP

192:LhPvlsq8ndKuvPQ942lIgKX/+WUZIQycAGHzR7rO6/qIRz462nvsiS2mw7KUXsM/:ZCKuvOZkoZIQycpZrOtIS62vFhBV8O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FBLA Coding.exe

Files

FBLA Coding.zip
.zip
FBLA Coding.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
partners.txt