FunChecker[.]exe | Triage

Sharing

General

Target

FunChecker.exe
Size

7.0MB
MD5

cd5e05decba2efa424ffe3b1028e4beb
SHA1

c88f7567b2a3d935629144d4d4156f3345bf0d0a
SHA256

1e1cf8d9ffdcedcd6365c2fd65455c8970a930aa5409191f2dbd923250a077fc
SHA512

ea30615ca2c0ec1bc9ccf0e755f0f1253a8e8e566a3bb4fb2c9dfb79cd90bb6fa81df4fdd79de01c86917a57d22edfab51e3970d055d7ac502fb00cc99d47441
SSDEEP

196608:fBE2AD5NnNVtIwOUj+pq6bpMMbmvqxk3btIJ0jSQ9:fBE2ADnNVGwOUjwqspM2mvekt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FunChecker.exe

Files

FunChecker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ