FASM[.]EXE | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FASM.EXE
Size

114KB
MD5

6dcbc02d7f4d5581a8b8edd9ff06afd7
SHA1

9bbb889401828b83b606085aa3c508b789c49f06
SHA256

fa3eafe9155bf704e98464a1e582142dd17d3a834316ac5c59a7db84cd92aa4f
SHA512

56a54a7a0d3086c53fab6aecdab3bd3a67c99d5957aa5e469112041f7f810e595fbf265d0d32c7f65b31623cfea21de7d761874dc2b8bdf04480a97cfdc77d52
SSDEEP

3072:KvR6wL1HbJ5B06LSQ0NwFnB8AuUqa/VtE:KvRvJ32nw1Db/3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FASM.EXE

Files

FASM.EXE
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 335B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ