FunChecker[.]exe | Triage

Sharing

General

Target

FunChecker.exe
Size

7.0MB
MD5

84a2cb1d7bd73f291bc99188eb702114
SHA1

93c2ebc09dfadf515fb6075f57f93aff693f2e16
SHA256

1707093d8ee6f93cc5938d2c46eddb565c1ae217587ae43ab0c8ae6a3d2ccf8f
SHA512

d33655c5c0cdaa062a5888e16ea91330c63f22d5475c94c16fcf7c2021820c051ea2a09fc6572a5a436ec0fb0f49a37c5c7e615e340999d4ade64c2231c077a2
SSDEEP

196608:TBE2AD5NnNVtIwOUj+pq6bpMMbmvqxk3btIJ0jSQ9:TBE2ADnNVGwOUjwqspM2mvekt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FunChecker.exe

Files

FunChecker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ