fuck[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
fuck.exe
Size 480KB
Sample240908-1qqkbaxbml
SHA256 4f179bb1925c0adf5cb44697a3f0986bd17bc65de686084641ef22c0a75b0a28
MD5 041ab886cac2a8e2b79fc486390d5510
SHA1 30625cd6be8c5c2603cae540034948aa71022d97
SHA512 7aa4a6dc2c168c9b8de6ddc4f14f632f6d42017f46acc6dbb23b12969c03d9d17def89f062b4a37354691e06f227f4f4d95ef0c2f87b3b798bf58836ae10e6e4
SSDEEP 12288:U+En/eRuTRgPZOZUtRJbZTzPk99GstRUvo9PR0KZYEDop5k5q70zlDbjflq54GaT:ejTREtRJb9TT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fuck.exe

File Explorer

fuck.exe

.exe 480KB

fuck.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4f179bb1925c0adf5cb44697a3f0986bd17bc65de686084641ef22c0a75b0a28
MD5 041ab886cac2a8e2b79fc486390d5510
SHA1 30625cd6be8c5c2603cae540034948aa71022d97
SHA512 7aa4a6dc2c168c9b8de6ddc4f14f632f6d42017f46acc6dbb23b12969c03d9d17def89f062b4a37354691e06f227f4f4d95ef0c2f87b3b798bf58836ae10e6e4
SSDEEP 12288:U+En/eRuTRgPZOZUtRJbZTzPk99GstRUvo9PR0KZYEDop5k5q70zlDbjflq54GaT:ejTREtRJb9TT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

496718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths