flixmate[.]service[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

flixmate.service.exe
Size

133KB
MD5

9ef849ed542a293b08c863abcf2779b4
SHA1

131051912dc1b9cb412071d085ecac182e0c639c
SHA256

1922770020226fed26e177563ee107c1bb8982f6206fa958d2ee22cafe19de8b
SHA512

f37c60824eb151c2502ff1c52bb85b3c4568f4df3dfde3d74a7643f124b693e18d5c25243724d989e89b78849b4941630555c1e0babf21d090f2385bbd2482db
SSDEEP

1536:gG1wrUHLtEpIN08yJvJ2OnSpJStPDELZFT/ifsBJJlLMTzib396JnypgvUX5vl1F:ggLtKcc8Sdqu0/JlLMPib39onxyFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
flixmate.service.exe

Files

flixmate.service.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\source\repos\flixmate-service\FlixmateService\obj\x64\Release\flixmate.service.pdb

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ