Raspador proxy byFantasma[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Raspador proxy byFantasma.exe
Size

8KB
MD5

269f8c87115eb0b0a841e1cfcac2676f
SHA1

9ce8e4ff76302d1ea09784bdd04e6a06a78e9ccf
SHA256

4fe3812829e8a416fdb16566b4cdad9868b37e7878e147a64f0372d1c3e2fe32
SHA512

ed5da72bdfe477b1581d2345fbf42928eb48f158a6e0988a55b923172fb36c9a7440b5ba49f2a9aa0bd386dc31b65f79fd0e7c5a5ff52829c66f7799640c8242
SSDEEP

48:60xC+wdZ+NojvThNMU4f1X9L0XtD2bcY1zvfDDzrIv23G8pn3Gj6iIgtC6P+b+qO:IPZvt4fjW8tkIsf+6qwBrIzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Raspador proxy byFantasma.exe

Files

Raspador proxy byFantasma.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\conta\Desktop\Proxies Scrap\Proxyscr\Proxy-Scraper-main\Proxy Scraper\Nova pasta\obj\Debug\Proxy Scraper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ