FunCheker[.]zip | Triage

Sharing

General

Target

FunCheker.zip
Size

4.9MB
MD5

3c9843fb6afb01b0ddd2c880147cb156
SHA1

5b889dd2416037fda2e1567357d5757aa9d7fb0f
SHA256

416e65650c0e2c368a1de8ec1c39432616ab767bf215d979f614719101e2f890
SHA512

f20ebac058c69851a572450d65e3053c06ab9c2c6ad826896ec359cc8d9660544973af8f19c7c01d5b552b644e399a7e3619dde139e880bb5e8708a38a7ddcb6
SSDEEP

98304:U85Abi1MPrYXidZ7e9wwwFOX9IxDKekJNYVTC1udTXB8OWetQhZTpyciWIJ:X5AmKPy8ZK9wz/GJGVTC1uXB8feyhZN+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FunCheker.exe

Files

FunCheker.zip
.zip

Password: 123
FunCheker.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.=7`
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.9X7
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.>qN
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ