FFAOL20240705[.]exe | Triage

Sharing

General

Target

FFAOL20240705.exe
Size

736KB
MD5

0c5770d3a1a71c6ba1f6d61c207e5032
SHA1

23c6d58f94cf3c791e7045aaa6ca1b59b358ac08
SHA256

3691019c577e36528e2dd3eee61a809d857a226b979d331874354211cd58bc32
SHA512

64f1122f92538bbf5610c2971d71a638441cbd60608b1affc84b1ea37274b553ee009ed9393bb26a20a3e76178d044a5476ed5499b385a1ddbb5787903eae320
SSDEEP

12288:IffdvuKZRMhSILlFr1NQZT25j9LPqEwqx1tzn35+xrxPRu7DnNkuLU4wcpI8ZJPN:gdv7ZRM4ILzrrQZC5EEww3vNSQHvF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FFAOL20240705.exe

Files

FFAOL20240705.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 733KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ