FsSimRateBandit[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FsSimRateBandit.exe
Size

264KB
MD5

3918c2a6455d7d7e91ac01e94e563e50
SHA1

40f0e6977dbd108795d192d7139e29cda5e6fbfa
SHA256

59e98edc7f58cea10ec7c540ba044f24dd6578aa02827e5239b7378fa4fa32cc
SHA512

c802061ff0c8da1b47f010255acb6fd8ed5a3511a942d472ee9ac6f95d537258cada3a29e4e669451e4e837479143ecf89f131fa5d97c3ed69c7ea86249ab4eb
SSDEEP

3072:FG9onBjqcZLl8ZnUMQ1zJwNjqlUjd5Ta:qonBqqJ8daLlUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FsSimRateBandit.exe

Files

FsSimRateBandit.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Development\Playground_Sources\FsCaptain\FsCaptain\obj\x64\Release\FsSimRateBandit.pdb

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ