foufdsk[.]exe | Triage™

General

Target
foufdsk.exe
Size 11.2MB
Sample240903-vgll4s1fmn
SHA256 8777baf9f5a68be1faf17fa6f7c5ab3de0113392784cc150b822b7db5426e380
MD5 3482cbbb23d7548633dde35f128ea40a
SHA1 b8cba7389b8e195b30ceb2e1a2b1d1fd6129adbd
SHA512 db334c6aae52045ff3ce7597f172cce21f5a3a61a85b8dd4c5517eac649b60e429df968e1538c99080449d0ebfb5d8e917cb43bfa105e27d0a790ca2463748c7
SSDEEP 6144:Oc6OZDisWsD0Td2HJxO+m8PuG1R4WnWjrsaz:O1OZDisvwdaxO0PuG1R4CWs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
foufdsk.exe

File Explorer

foufdsk.exe

.exe 11.2MB

foufdsk.exe

IMPHASH 526678b0f88b7214e779e54df5f3d8dd
SHA256 8777baf9f5a68be1faf17fa6f7c5ab3de0113392784cc150b822b7db5426e380
MD5 3482cbbb23d7548633dde35f128ea40a
SHA1 b8cba7389b8e195b30ceb2e1a2b1d1fd6129adbd
SHA512 db334c6aae52045ff3ce7597f172cce21f5a3a61a85b8dd4c5517eac649b60e429df968e1538c99080449d0ebfb5d8e917cb43bfa105e27d0a790ca2463748c7
SSDEEP 6144:Oc6OZDisWsD0Td2HJxO+m8PuG1R4WnWjrsaz:O1OZDisvwdaxO0PuG1R4CWs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

27672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW CreateJobObjectW InterlockedCompareExchange UnlockFile CreateHardLinkA GetTickCount CreateNamedPipeW FindNextVolumeMountPointA SetCommState GlobalAlloc LoadLibraryW GetCalendarInfoA SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetFileAttributesW GetModuleFileNameW CreateActCtxA GetThreadPriorityBoost VerifyVersionInfoW GetLogicalDriveStringsA SetLastError GetProcAddress GetConsoleDisplayMode GetProcessVersion InterlockedExchangeAdd CreateFileMappingW SetDefaultCommConfigW CreateEventW OpenEventA GlobalWire EnumDateFormatsA EnumResourceNamesA VirtualProtect GetCurrentDirectoryA WaitForDebugEvent PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExA ReadConsoleInputW GetTempPathA EnumCalendarInfoExA LocalFree TlsFree LCMapStringW CommConfigDialogW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP GetCurrentProcess SetEndOfFile GetConsoleAliasExesA GetNumberFormatW GetLocaleInfoA MultiByteToWideChar GetLastError HeapFree HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId HeapAlloc IsProcessorFeaturePresent HeapCreate ReadFile EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetStringTypeW RaiseException SetFilePointer SetStdHandle RtlUnwind HeapSize CreateFileW

user32

DrawStateA LoadMenuW CharUpperW GetSysColor GetMenuStringA GetCaretPos SetMenu

gdi32

GetCharWidthFloatA CreateDCW GetCharWidth32A GetBitmapBits

Sharing