flugerfree[.]json[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

flugerfree.json.exe
Size

7.7MB
MD5

7721d6a34b26438b421140086cd40d42
SHA1

310c69efcb721413e09be78fc175b72a48c0b8c6
SHA256

032263b06229864fd1290f2ac40547ec1f70edb09cd3f79ba2033bac07fde23f
SHA512

cfe5f37c0e0db00921ce80026b7ab0013872c9d576f0f742e79bd2783f079414619e4c734fae468e7a4df1db5bfef38cfa4c09231f30577cd50a57d7af596ca9
SSDEEP

196608:mwGjCb3qtqYm5TT19/eUwEm8FNQYuiAoiBm48gWxCJ8b:YjiNV//oqzQYudoigLCJ8b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
flugerfree.json.exe

Files

flugerfree.json.exe
.exe windows:6 windows x86 arch:x86

ea500ad27b6474738e09414dc09358f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetCapture
CharUpperBuffW

advapi32

RegOpenKeyExA

shell32

SHGetMalloc

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateTextureFromFileInMemoryEx

imm32

ImmSetCandidateWindow

Sections

.text
Size: - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 658KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fluger0
Size: - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fluger1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fluger2
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ