Fatal[.]exe | Triage

Sharing

General

Target

Fatal.exe
Size

7.3MB
MD5

a20b71f441f7d3bebc3bdd1098ebd9fe
SHA1

0d24a4c6447eef84947ea7b572b0ac069669fc98
SHA256

5f6ae7e11f05fd4da69f02c9a6e87821248766095dfd97569c1e26132681df85
SHA512

09fb03634f98aedc5ce1a5da6136ee679e294d573e6c5fe2f59751fe8988c355217f78a7df1e85d575822b4a27d492e716ea4ed81d50b19ccf5872978f7173a8
SSDEEP

196608:f+FEahQUPn5BOeDPLvwsNff7T/NDNqCsbTyiLqR3YmOZdgkSI:f+FVu8Xjrf7TuCaXLqVmgkS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fatal.exe

Files

Fatal.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.silky0
Size: - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.silky1
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ