FinalMom[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FinalMom.exe
Size

659KB
MD5

9591e281a8a45e0c68b15c49c6b09909
SHA1

5443c45dae49d2e2528008801e32613b74aec594
SHA256

afd8aee87820731fac703a7a1c1c2fdf5be0ec211c79c42e57d6be89439e02fc
SHA512

8b421c468349bff36c98d2f770eda2e5dae1ad7b7e5f5895f9681d8b0c3885aaf05a9b6acd8d21ccdb9ab137b46f3619522808c9b75785cd6211c74c5b30ba07
SSDEEP

12288:gBKScidTNoY0BkWGKnWcusit023T5+gL9nRmaS8NNqIZCGSNMIW+MZ5N2bbVAB4j:gYlidRoDPwD5+YnV4WiM5LZ5aJ8op

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FinalMom.exe

Files

FinalMom.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ