fud_cr1[.]exe | Triage

Sharing

General

Target

fud_cr1.exe
Size

3.7MB
MD5

e2a190eebb641569fffb199c61b54260
SHA1

5c6268c2eb9010f08adc72fbf49343ed632b187d
SHA256

a95c91ef6f6c5c62046ebce65b674f077a7ed07877199944095ab021c840af58
SHA512

f04c16ea16ece51d100602edc45b42843fcddefd93c5fd9d622a68fc625bc568cc2af1b0f28460fce46d83fba80e7183710ecf9dbabe0a2a52a1b1feb6f50243
SSDEEP

49152:kk4A9Ua1kQwVseu5kvIuhpxuD4UbO0FbmCcc5:k4Ua1kFVN8kAuh30Fbm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fud_cr1.exe

Files

fud_cr1.exe
.exe windows:6 windows x86 arch:x86

edef8b54d302f064c62760f07435bdf7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
CloseHandle
TryEnterCriticalSection
CreateThread
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
GetTempPathA
SetEndOfFile
SetFilePointer
CreateNamedPipeA
ConnectNamedPipe
ExitProcess
VirtualAlloc
ExitThread

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 966KB - Virtual size: 965KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ