faggotp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faggotp.exe
Size

186KB
MD5

a5685f55bbf767c3de60ebc2b98c3839
SHA1

c1706b63f94d9638474aa43a50ebe844bf115ee1
SHA256

1af3b0ae27def149dfe2e239b5359bc68b7c66a90ecce9993d3cee4a4016e19c
SHA512

227435c30098f9e14139dbbfa3566f7a15a0c774351501fb58d1f9cd4b541e900a7c313a2fe2de289129e08ad78f74e4f0a3eaad072b6c2c8b816a079a6eadf2
SSDEEP

3072:P3OPILoyjy4G6x+pHUGYl/GUCeQ3P4B210aQ6BV1d5BoLo6Y6PdiPAXArMZcTO/:P3RL1+3YhfQ3qyBV/joLNPd1woZcTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faggotp.exe

Files

faggotp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ