General

  • Target

    fmd_2.0.32.0_x86_64-win64.7z

  • Size

    4.8MB

  • MD5

    e91fc0444c83ae79179a9866d265f787

  • SHA1

    d3effebfe692aed6fbce8db9fb45192f195cc477

  • SHA256

    730ad688f34076d6767f3d82a709bee4243dc813f8a267d4f13abc5445077173

  • SHA512

    d7b8aeda02747f3341735c03b61443c182e2e45f952bf41a65747fcdc9ae1048e32741dd8614b553ae7d6711d1c52fed69699dd29fd8a0d35394b7d66b02e33e

  • SSDEEP

    98304:j9KitNT5L+l4l5Bc6jCdPlrFS6meBc1jHoeXTXlQvJOCTIMFbFHEzlK:BDTNtYt8CcRXOMCFFic

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • fmd_2.0.32.0_x86_64-win64.7z
    .7z
  • 7za.exe
    .exe windows:4 windows x64 arch:x64

    7232d06dc00920698f0cad2452012553


    Headers

    Imports

    Sections

  • changelog.txt
  • config.json
  • fmd.exe
    .exe windows:4 windows x64 arch:x64

    18ccf28e282f42960f2822c97c9493ad


    Headers

    Imports

    Sections

  • images/waiting.gif
    .gif
  • languages/fmd.de.po
  • languages/fmd.el_GR.po
  • languages/fmd.en.po
  • languages/fmd.es.po
  • languages/fmd.fr.po
  • languages/fmd.id_ID.po
  • languages/fmd.pl_PL.po
  • languages/fmd.pt_BR.po
  • languages/fmd.ru_RU.po
  • languages/fmd.tr_TR.po
  • languages/lclstrconsts.ca.po
  • languages/lclstrconsts.cs.po
  • languages/lclstrconsts.de.po
  • languages/lclstrconsts.es.po
  • languages/lclstrconsts.fi.po
  • languages/lclstrconsts.fr.po
  • languages/lclstrconsts.he.po
  • languages/lclstrconsts.hu.po
  • languages/lclstrconsts.id.po
  • languages/lclstrconsts.it.po
  • languages/lclstrconsts.ja.po
  • languages/lclstrconsts.lt.po
  • languages/lclstrconsts.nl.po
  • languages/lclstrconsts.no.po
  • languages/lclstrconsts.pl.po
  • languages/lclstrconsts.pt.po
  • languages/lclstrconsts.pt_BR.po
  • languages/lclstrconsts.ru.po
  • languages/lclstrconsts.sk.po
  • languages/lclstrconsts.tr.po
  • languages/lclstrconsts.uk.po
  • languages/lclstrconsts.zh_CN.po
  • languages/updater.el_GR.po
  • languages/updater.en.po
  • languages/updater.es.po
  • languages/updater.fr.po
  • languages/updater.id_ID.po
  • languages/updater.pl_PL.po
  • languages/updater.pt_BR.po
  • languages/updater.ru_RU.po
  • languages/updater.tr_TR.po
  • libbrotlicommon.dll
    .dll .js windows:4 windows x64 arch:x64 polyglot

    ccb34e02e5bd568f952db5cabbf3e2a1


    Headers

    Imports

    Exports

    Sections

  • libbrotlidec.dll
    .dll windows:4 windows x64 arch:x64

    0f6da42265dd74d82d2b568ae7dca7b9


    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1-x64.dll
    .dll windows:4 windows x64 arch:x64

    b8759d85b91f7b5fd7d08969508bd084


    Headers

    Imports

    Exports

    Sections

  • libduktape.dll
    .dll windows:4 windows x64 arch:x64

    0222bca1ad1cafb532ed7132af3764e8


    Headers

    Imports

    Exports

    Sections

  • libpcre2-8.dll
    .dll windows:4 windows x64 arch:x64

    9db8cf522b9db07c92d17104f75b9f50


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:4 windows x64 arch:x64

    2b53ed320d4110c496eb0eaf96054cf0


    Headers

    Imports

    Exports

    Sections

  • libwebp.dll
    .dll windows:6 windows x64 arch:x64

    ccfb792453bc23c3ad9ba2a054e247b1


    Headers

    Imports

    Exports

    Sections

  • licenses/7-Zip Extra License.txt
  • licenses/Duktape License.txt
  • licenses/FMD-LICENSE.txt
  • licenses/GPL-2.0.txt
  • licenses/LGPL-2.1.txt
  • licenses/LibWebP License.txt
  • licenses/Lua License.txt
  • licenses/LuaJIT License.txt
  • licenses/MPL-1.1.txt
  • licenses/OpenSSL License.txt
  • licenses/PCRE License.txt
  • licenses/THIRD-PARTY-LICENSE.txt
  • lua54.dll
    .dll windows:4 windows x64 arch:x64

    4abb04872ea153eb00239982cab6bf4a


    Headers

    Imports

    Exports

    Sections

  • pb.dll
    .dll windows:6 windows x64 arch:x64

    7c568f3eb6533bd235da56e3bbf363f9


    Headers

    Imports

    Exports

    Sections

  • readme.rtf
    .rtf
  • sqlite3.dll
    .dll windows:4 windows x64 arch:x64

    76e6af2786b4663ac75b16040875e1ae


    Headers

    Imports

    Exports

    Sections

  • updater.exe
    .exe windows:4 windows x64 arch:x64

    1fa380db9f230745e6689c47414cf6e5


    Headers

    Imports

    Sections