Fx_vip_3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Fx_vip_3.exe
Size

108KB
MD5

68a90fb127a33a78f55cf0d9ad69d8fa
SHA1

75e14ad9972ac655ac11e86c5eb96a920c831498
SHA256

13c6f8e42e887df4bb944d75e05ccbcbef69476ea7d2a03cc77d6bed4f77d696
SHA512

350725642c8dea0c23b7d0c9b955ec7c9700a5ee8c537f9dd1a51491d6fddd7cdb3b50965ca5d9b799045c7baf2495b91a8060e7f53637ac3e8fd909d7bb68f9
SSDEEP

3072:S9L3bA+eKh2SAJ9SxsEeqPdz/blqCmIjhM:Shh23LSxsE9N/blqZIt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fx_vip_3.exe

Files

Fx_vip_3.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

oP1
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oP1
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ