FUD App Builder[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FUD App Builder.zip
Size

2.0MB
MD5

691d22d37d78ee3a17bb11ad0a54acbc
SHA1

7986a723bfcde0ac6349be70cbad51cbd0c9595d
SHA256

ab42f0e990b032f80338bfda99b928785922d2cc668e199eb2d825f7937ee4fd
SHA512

1a10f8546231973560f3f830ac3762df4fe4749df156b00b4c7b86218a5286d5cca3b7ff4816ea0f2f4c286a9c1d579485db58b631c99cfceba5f81719e52a79
SSDEEP

49152:R3efLQqT+Yt1a/6mGeUBHpZvRd+c2jcWRrXo6GJx9RVajRkl9z/SQ:5efBjtSghlNExo6a97amnzqQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FUD App Builder/AppBuilder.exe

Files

FUD App Builder.zip
.zip

Password: @2024
FUD App Builder/AppBuilder.exe
.exe windows:4 windows x86 arch:x86

Password: @2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ