Fliqlo[.]scr | Triage

Sharing

General

Target

Fliqlo.scr
Size

379KB
MD5

6156dfbd547c0074f66d3a06d840a665
SHA1

491611f7f8e112275a3e47e84b4e4c5788f2369f
SHA256

2e0a46b385f21c081f69c940bf850656538a43dd8a1860093b88737f4ff82f8d
SHA512

6108bc8c03ceec434cebdfcb5466da967f6c7d3419177422269848cae9c13e81505c2237b5e07673be5c5bbe1008bde082e574ca1c7932173e66fa786655d8d9
SSDEEP

768:WZLE4ljuHcqfqoHreSORn52qiYmLEi9HejBq77777Ktou4LGM0cm:WZLE8qcq7u58YCEZB9BvCm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fliqlo.scr

Files

Fliqlo.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ