FunpayBoostv1[.]0[.]exe | Triage

Sharing

General

Target

FunpayBoostv1.0.exe
Size

49KB
MD5

99ea7557f56441b952b32274f85bc247
SHA1

635da24bc43a242a11135240c7a1713d494e4191
SHA256

7c1518bc9d354283d398370c5ecbc8a56e6e90f641e336408f66dec4c955943e
SHA512

3ff33d399fe8c6bd799241e1f1fb0b5179f2ce14a894533ee701fa99366a8a1151378071b4469e797d5dd1ad153bf91021b1202a0124156e55c7331ffcd39243
SSDEEP

1536:HuCCCCCsXbgYHGy3L+6BHL+6DSSSSfL+6E:H2bgYbtHrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FunpayBoostv1.0.exe

Files

FunpayBoostv1.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\danie\source\repos\fb\fb\obj\Debug\fb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ