fuckclass[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fuckclass.exe
Size

662KB
MD5

4d30cf3cca61ab28f32fe3f3c522f817
SHA1

03f5193e69bf40c58e4ce7b311f3f2549576cc89
SHA256

fae8f104dcc086884646f822745504dbb3dcf94ad14adc9795c0ed489c23f15b
SHA512

1af8023eb6eced6ced7bb1545a818e04f5e5858e067a6a0a8d264042c3063ac0f523179815bfa973b16057d8904217341e891ef1a08cab0c433b933596b90eab
SSDEEP

12288:AiYtbvUKchDtOArMtIklpvP/EEJbn/DK+WrTYZmCHx5eUtI1bzChREi:atbvUB8tIUEEJbn/DK+WrTYZmCHx5HtB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fuckclass.exe

Files

fuckclass.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\baris\Downloads\ReClass.NET-master\ReClass.NET-master\obj\Release\x64\fuckclass\fuckclass.pdb

Sections

.text
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ