FluxAPI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FluxAPI.exe
Size

412KB
MD5

d19b7072aaa9cfd5450b73c7810c16d0
SHA1

a4988b713c197fef74abd2c26ecaae3dc7964f16
SHA256

d610ff4096d6bc82449a720f9a8cb344377fd77ad88c10de333b52bcf61e63e1
SHA512

57f43a6e9bda64300ab4b2a12d8d0c9b107bf7a2e098f4ecf4e9a0e1a4dc200b7073f263c3b6c6691c0be831f3a710180bb4022e169acb57d1dadf641eb198b6
SSDEEP

6144:zAZkMbjpoANDIlce0/RVm+0w1vVlLl++Z2dSRzTfxftPZJ1/bic/1RvL3tOqyI4C:zi3bTDIzgv9NrZrfFtz1/bv/1RvL9nx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FluxAPI.exe

Files

FluxAPI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\jepit\source\repos\FluxAPI\FluxAPI\obj\Debug\FluxAPI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ