FinalMom[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FinalMom.exe
Size

269KB
MD5

a758b6b396011825ecdf109b5ff89909
SHA1

f3d0500965f4b0dbf7a55636cdc9c79466863720
SHA256

8209cf61083999bd667441279d9c2e380bfa4bbdce3d5c1c5c5060b29ab67f52
SHA512

95b9390e9f2a74ae2ecce94e081ff28115b8f6ef23acbdbf7760e7d4ad1186e40d3663077a869b2386de34b00359fda7bbe19ea20b5d64fbc77d5276719c0563
SSDEEP

6144:LMKOn6dqHvFNqxtk2m7GxZ5STJbXHnfz83P3QqGLU6EruHCKQotQeWbbU/xHFCLe:LhjoHKxvm66hr+gqG/E0Q9jU/xHFCLbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FinalMom.exe

Files

FinalMom.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

e/,6(o
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ