FALLOUTW[.]EXE

Sharing

Copy URL Twitter E-mail

General

Target

FALLOUTW.EXE
Size

1.2MB
MD5

a5d102e85e788426cf01862e9035d097
SHA1

3d06d721f9e00a2c3e69673646f9401d43f0e156
SHA256

444257e5fe91e6c333261aecadacb1f46dbba0319fa0b187de89f36914f32272
SHA512

f2a73f10983dbed810ec906d004f97a42a242cb3a34dae1758f718a4346b87cf8256f151f65669945f8bbf45db1e23c1a8c6acf34b99547af084837a3a78de4d
SSDEEP

24576:sbDa77AH7Tq7Tq4HqG0fkVYnGv2q0ncqix+8p5q/BzUKO7imKnmuAc1:/72qqimEp5GOtyAU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FALLOUTW.EXE

Files

FALLOUTW.EXE
.exe windows:1 windows x86 arch:x86

146a027a22cc562928cf1cb5e4d86836

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

gdi32

GetStockObject

user32

CallNextHookEx
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetAsyncKeyState
GetKeyState
GetMessageA
GetSystemMetrics
GetUpdateRect
LoadCursorA
LoadIconA
MessageBoxA
PeekMessageA
RegisterClassA
SetCursor
SetFocus
SetWindowTextA
SetWindowsHookExA
ShowCursor
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
GetActiveWindow
wsprintfA

winmm

timeGetTime
timeKillEvent
timeSetEvent

kernel32

CloseHandle
CreateMutexA
CreateProcessA
FreeLibrary
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetProcAddress
GetTickCount
GetVersionExA
LoadLibraryA
VirtualProtect
WaitForSingleObject
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
DosDateTimeToFileTime
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetDiskFreeSpaceA
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetTickCount
GetTimeZoneInformation
GetVersion
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
ReadConsoleInputA
ReadFile
ReleaseMutex
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEvent
SetFilePointer
SetStdHandle
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteConsoleA
WriteFile

Sections

BEGTEXT
Size: 834KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DGROUP
Size: 307KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1.4MB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 59KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

146a027a22cc562928cf1cb5e4d86836

Headers

File Characteristics

Imports

gdi32

user32

winmm

kernel32

Sections

BEGTEXT Size: 834KB - Virtual size:

DGROUP Size: 307KB - Virtual size:

.bss Size: 1.4MB - Virtual size:

.idata Size: 3KB - Virtual size:

.reloc Size: 59KB - Virtual size:

.rsrc Size: 9KB - Virtual size:

BEGTEXT
Size: 834KB - Virtual size:

DGROUP
Size: 307KB - Virtual size:

.bss
Size: 1.4MB - Virtual size:

.idata
Size: 3KB - Virtual size:

.reloc
Size: 59KB - Virtual size:

.rsrc
Size: 9KB - Virtual size: