Flashr-cleaned[.]exe | Triage

Sharing

General

Target

Flashr-cleaned.exe
Size

690KB
MD5

f4a2bc9e90bc556d1018069157c62dc8
SHA1

ff01fa65004f69c6f180664fa08466af9921c640
SHA256

5d42edbb6b41f93d85db193ca5ed583ec60b8ec3c4c045f1efec181cb0b8399c
SHA512

9047b52b90e949e4724434313fec81b13ddd5bbc08597de70dd74fa4189df20a88805277c11cb616c28de5ce1e6e57193240779fd14995b2c9011a708fb86eac
SSDEEP

12288:pXd1b5awwTSK8oYTHYpVXJklBDazMMHWO4Fj3QhN79NVLpUP:J9lK6oQHqGB2zNHWOejOp9NI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Flashr-cleaned.exe

Files

Flashr-cleaned.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ