fixedmapper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fixedmapper.exe
Size

10.3MB
MD5

0d28dada7ed47883e0afc785da950ab4
SHA1

507a7fde6e31a9f1ae7ca7407dce4300b21aa237
SHA256

dd7d3fe552552d568df92272d42825a2852005c06c294d1d9c33e6a0fd161fb4
SHA512

3c204445a75d57846851ae7cf425e3c7bde71020bd065e4875a6a75fde03055a0525722c55ecbb46bd36f207a3422cccd7a24a38807dd3ef2eac72f5f4912298
SSDEEP

98304:BVJ5eQ7lwDmQHdfebtUK5kcTtq2JJXur2LnhVtEojME0VJIElyPnpYa6qe0EeCPj:BVOQZwL9f6KK5kQqle/CRVJIseYzpl3V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fixedmapper.exe

Files

fixedmapper.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

9@,5K+
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9@,5K+
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

vXoaQfTV
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.????
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ