FantaMultiTool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FantaMultiTool.exe
Size

14.6MB
MD5

5c027cdec35f6b9c9530c7236a974bb6
SHA1

2b870b541950b4d162b2ee509e4db223cb4a3565
SHA256

377a80fe64a81254028e84f55c85bdeb217487f8cada812e1a50756b811231c7
SHA512

58e0558449cff781195a743a015a318a76e43c03c87ff22adac431fa15bac2b0de01d3b8dfe47c6bbcd3df48d9f67da5c056698c8085bc8adf9d9173a594e444
SSDEEP

98304:D1NPrr5qt8XCY8Px4NIrr9LpaUhifUkee1ZZ333:TP480xXrr9LpaUhifUK33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FantaMultiTool.exe

Files

FantaMultiTool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Fanta\source\repos\FantaMultiTool\obj\Release\FantaMultiTool.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14.5MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ