flameware(1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

flameware(1).exe
Size

9KB
MD5

d279c74adfafc994b7632fc1133ab45d
SHA1

2ced3ef160eed850b7b25bf781a00eae88ef052d
SHA256

8d2b1918921cd0f90933eb3f7af26955b9af75958f539bb0fc44626fb1c968b6
SHA512

2b6155b971d9d0b8e25855e03d3f533a5c8607e7fb4112eed9a54fce92cb46bb3e256931238266990bdfe4da77954e0bc1a5f7356ad255344a18b90bfef7179e
SSDEEP

96:PcZp+BRQfBY5Vwf6h9hYEhwQujMpO9FV9zL+CsdGYQ+GiAs9kVpI9ptf/cNQzNt:PkkKEfmMkLV5LfsdtBQakVpI1f/Ky

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
flameware(1).exe

Files

flameware(1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\emilj\source\repos\flameware\flameware\obj\Release\flameware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ