pfsuqh[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pfsuqh.exe
Size

13KB
MD5

055b10c0cb7bd224e5d4c351e601674c
SHA1

946e62fe0ce52c17617b4814cf01f3217ae5227e
SHA256

bc3bca7fc04e9b3a8a637e4ce86aadb4cc1315644c40ef04e570db8a0d7ea002
SHA512

8a09c196dbc87425a4d07f4d1cd750329ce6607f20d7ad9ee586902f4a27d3f25b22410f62b9304299273f52a4fc948932fce359d95012403fb935c0f26f233d
SSDEEP

384:riIEMA7bWjpxMMD7kxjuEQSE5y6XjnU/SM2jpMycYb:W7Kjd/kBl/6XjRcYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pfsuqh.exe

Files

pfsuqh.exe
.exe windows:5 windows x64 arch:x64

13b6781b251e80b616de3fdc2cc2b478

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ws2_32

send

msvcr100

atoi

Sections

.YRWMNZ1
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JNGGDS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE